Subprocessor List

A Subprocessor is a third-party provider engaged by Engage that accesses or processes Customer personal data in the course of delivering the Services. Providers that process only Engage's own operational data (e.g., website analytics) are not listed here but are referenced in our Cookie Policy.

Before engaging a Subprocessor, Engage assesses security controls and certifications, privacy compliance posture, data residency and transfer mechanisms, business continuity, and contractual willingness to accept data processing obligations equivalent to those Engage provides to Customers.

In accordance with the Engage DPA, Engage provides at least 30 days' advance notice before adding or replacing a Subprocessor, via email to Account Owners and publication on this page. Customers have a 14-day window to object on reasonable data protection grounds by emailing privacy@engage.nevtan.com with subject “Subprocessor Objection — [Provider Name]”. To receive change notifications, enable them in Settings → Privacy → Subprocessor Notifications.

All Subprocessors are contractually required to:

• Process Customer data only on Engage's documented instructions;
• Implement equivalent technical and organizational security measures;
• Notify Engage of any breach without undue delay;
• Restrict onward sub-processing;
• Return or delete Customer data upon termination.

Most Subprocessors operate infrastructure in the United States. Where Customer personal data is transferred from jurisdictions with transfer restrictions, Engage relies on EU Standard Contractual Clauses (Modules 2 and 3), the UK IDTA addendum, adequacy decisions, and binding contractual protections. See Section 8 of the Engage DPA and Section 8 of the Privacy Policy for full details.

Privacy Officer
Email: privacy@nevtan.com

Security Team
Email: security@nevtan.com