Subprocessors

    A subprocessor is a third-party vendor that provides services for Lyyti, who has or potentially will have access to or process personal data. Lyyti engages different types of vendors to perform various duties.
     
    Lyyti uses commercially available measures to evaluate potential and current subprocessors. All subprocessors need to have sufficient security, privacy, and confidentiality measures in place to act as subprocessors.

    Lyyti Core

    1. Upcloud Oy

    2. Mailjet S.A.S

    3. LINK Mobility Oy

    4. Apix Oy

    5. Sophos Ltd 

     

    6. Virnex Oy

    Type

    1. Cloud Service Provider

    2. Email Gateway Provider

    3. SMS Gateway Provider

    4. Invoices

    5. Security monitoring including security information and event management (SIEM) capabilities.

    6. Bank Connectivity Service
    (only for our Finnish customers)

    Location of processing

    1. EU/EEA, Finland

    2. EU/EEA, France, Germany, Belgium

    3. EU/EEA, Finland

    4. EU/EEA, Finland

    5. EU/EEA, Germany


    6. EU/EEA, Finland

    Lyyti Modules

    1. Google Cloud Platform

    2. Mailjet S.A.S

    3. Aiven Oy

    4. Sophos Ltd 

     

    Type

    1. Cloud Service Provider

    2. Email Gateway Provider

    3. Database Services

    4. Security monitoring including security information and event management (SIEM) capabilities.

    Location of processing

    1. EU/EEA, Finland

    2. EU/EEA, France, Germany, Belgium

    3. EU/EEA, Finland

    4. EU/EEA, Germany

     

    Lyyti Modules

    1. Univid AB

    Type

    1. Webinar and live streaming 

    Location of processing

    1. Sweden

    Lyyti will keep the personal data processing in the EU/EEA area. Processing locations will be Finland (Google, Upcloud, LINK Mobility, Fiarone, Aiven, and Virnex), Germany (Mailjet), and Belgium (Mailjet). 

    We wanted to modernize our operating infrastructure and utilise the public cloud for hosting. Google Cloud Platform offers capabilities that would be time-consuming, even impossible, to build and operate by ourselves. Scalability, security, and maintainability are requirements that Google Cloud Platform fulfills well. Amazon’s AWS and Microsoft Azure were options as well and the decision to choose Google Cloud Platform was influenced by the fact that Google operates one of their data center facilities in Finland.

    We utilize Google Cloud Platform’s technical capabilities to ensure that the data is kept inside EU/EAA at all times. Google Cloud Platform is offered in geographically delimited regions that control where the services are run and data stored physically. We will utilize the option to enforce data residency to the EU/EAA region for the services run. The main processing and data storage location will be Google Cloud Platform facilities in Finland.

    Lyyti is always responsible for the work of the subprocessors as it is for its own work. Lyyti has written agreements with every subprocessor.

    Subprocessors are responsible to keep all the data they process confidential, even after the agreement has ended.