1. Purpose

This document provides transparency on third parties (“Processors” and “Sub-Processors”) involved in processing data in connection with ClickTerm services.

Important: Not every vendor listed here processes every customer’s data. Applicability depends on the customer’s configuration and enabled features.

2. Definitions and scope

Scope A — Business / Customer Account Data (Broader scope)

Includes:
Customer company details, billing/invoicing, customer admin users, support/sales communications, internal operations, reporting, accounting, and corporate tooling.

Scope B — End-User Data (Narrow scope, minimized)

Includes only:
Data relating to a customer’s end users interacting with ClickTerm clickwrap flows, such as:

Clickwrap Event metadata (e.g., accept/decline/pending, timestamp)
Technical metadata (e.g., IP address, browser/device information, user agent)
Placeholders
Clickwrap Version identifier and audit trail entries
Optional delivery of acceptance documents/certificates (if enabled)

Goal: End-user data is processed using the smallest practical set of providers (primarily hosting and security), with optional providers only when a feature is enabled.

SECTION A — Scope A (Business / Customer Account Data)

A.1 Sub-Processors (Scope A)

Name	Purpose	Country
Amazon Web Services	Cloud Service Provider	Germany
Atlassian	Project Management	Australia
Cloudflare	Security Services	USA
Datadog	Test Automation and monitoring	USA
Elasticsearch	Analytics Services	Norway
Mailgun	Emailing Services	USA
SendGrid	Emailing Services	USA
Sentry	Monitoring and alerting	USA
Tableau	Data Analytics	Germany
TelQ Telecom DOO	Development Services	Serbia
n8n	Workflow automation / integration	Germany
OpenAI	AI services (internal productivity)	Ireland

A.2 Processors (Scope A)

Name	Purpose	Country
Amazon Web Services	Cloud Service Provider	Germany
Atlassian	Project Management	Australia
Calendly	Scheduling Services	USA
Freshworks	Customer Relationship Management	USA
Google	Reporting Services	Ireland
Koethe	Accounting Services	Germany
Microsoft Teams	Communication Services	Germany
Salesforce	CRM	Germany
Slack	Communication Services	Ireland
StatusPage	Communication Services	USA
Tailscale	VPN	Canada
Zapier	Automation Tool	USA
Zoho	Accounting Services	Germany
Zoom	Communication Services	USA
n8n	Workflow automation / integration	Germany
OpenAI	AI services (internal productivity)	Ireland

Note: Scope A tools are used for corporate operations and customer account administration. They are not required for processing ClickTerm end-user clickwrap flows (Scope B).

SECTION B — Scope B (End-User Data) — Minimal list

3. What we do to minimize end-user processors

For Scope B, ClickTerm is designed to keep end-user data within a small set of providers:

Core infrastructure hosting
Edge security / traffic protection
Optional services only when you enable specific features (e.g., end-user email delivery)

B.1 Sub-Processors that process (or may process) End-User Data

B.1.1 Core (used for Scope B by default)

Name	Purpose	Country	Notes
Amazon Web Services	Hosting / storage of clickwrap versions, events, audit trails and related service data	Germany	Core infrastructure
Cloudflare	Security (CDN/WAF/DDoS), may process IP/traffic metadata	USA	Edge security

B.1.2 Operational telemetry (only if your configuration includes end-user identifiers in logs)

These providers are used for monitoring/observability. ClickTerm aims to avoid storing unnecessary personal data in monitoring tools; however, depending on configuration, technical identifiers may appear.

Name	Purpose	Country	Notes
Sentry	Error monitoring	USA	Technical telemetry; configured to minimize personal data
Datadog	Monitoring/telemetry	USA	Technical telemetry; configured to minimize personal data
Elasticsearch	Logs/analytics	Norway	Used for operational logging/analytics as applicable

B.1.3 Optional (only if enabled)

Name	Purpose	Country	When used
Mailgun	Email delivery	USA	Only if you enable end-user email delivery (e.g., acceptance copy / document delivery)
SendGrid	Email delivery	USA	Only if you enable end-user email delivery (e.g., acceptance copy / document delivery)

B.2 Processors that process End-User Data

In standard configurations, no additional “Scope B-only Processors” are required beyond the Sub-Processors listed above. If a customer enables features that route end-user data to additional vendors, those vendors will be added to this Scope B section.

4. Change notifications

The lists may change over time as ClickTerm updates vendors.

Contact: For legal/privacy questions regarding this list, contact legal@clickterm.com.

Sub-Processors and Processors