Sub Processors
Rakuten Advertising engages the sub-processors listed below to support the provision of its services. The table identifies, for each sub-processor, the purpose of processing and the primary location at which personal data is stored.
| Sub-Processor | Purpose of Processing | Location of Data Storage |
|---|---|---|
| Atlassian | Internal documentation and ticketing systems | US |
| Box | Secure file sharing | US |
| Corpay | Payment processing | US |
| Cybersource | Payment processing | US |
| FullStory | Platform usage analytics | US |
| Gong | Revenue management system | US |
| Google BigQuery | Platform data storage, analytics, and reporting | US |
| Google Cloud Platform | Platform network infrastructure, and data storage and processing | US, Japan, UK, Australia |
| Google Cloud SQL | Platform data storage, analytics, and reporting | US |
| Google SecOps | Security incident and event management system | US |
| Google Workspace | Secure file sharing | US |
| HubSpot | Marketing system | US |
| Impact.com | Provision of affiliate network technology and partner/transaction tracking services | US |
| Monday | Internal project management system | US |
| PayPal | Payment processing | US |
| PostHog | Product analytics, session recording, and behavioral analytics | US; EU for EEA user data |
| Salesforce | Customer relationship management system and onboarding | US |
| SendGrid | Email services | US |
| Snowflake | Platform data storage, analytics, and reporting | US |
| Wiz.io | Cloud native application protection platform | US |
| Zendesk | Customer service platform | US |
The “Location of Data Storage” column identifies the primary location(s) where personal data is stored at rest. Personal data may be accessed from, and processed in, other locations by the relevant sub-processor, its affiliates, or Rakuten Advertising’s affiliates in the course of providing and supporting the services, including for customer success, technical operations, and support functions. Any such access and processing is subject to appropriate safeguards, including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable.