Sub-processors
These are the companies that process personal data for Absenca. RRYME LTD has a data processing agreement with each sub-processor, and this list is the annex to our Data Processing Agreement.
We give at least 10 business days' notice before adding or replacing a sub-processor, by email to organization admins and on this page.
Absenca is hosted on Cloudflare's global network; specific regions are not guaranteed.
Sub-processors
They process personal data on our behalf to run Absenca.
| Company | What it does | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. (United States) | Hosts the application, its database and file storage; logs; sends and routes email | All customer data held in Absenca, including leave data and attachments; logs with user ids; email content | Cloudflare's global network; specific regions are not guaranteed | UK: DPF UK Extension and/or UK Addendum · EU: SCCs and/or DPF |
| Plus Five Five, Inc. (Resend), United States | Delivers transactional email when the primary route fails | Recipient name and email address, message content, delivery records | United States | UK: DPF UK Extension and/or UK Addendum · EU: SCCs and/or DPF |
| Microsoft Corporation (United States) | Relays messages between Absenca and Microsoft Teams | Names, leave dates and leave types in Teams messages; Teams user and conversation ids | Microsoft data centres; specific regions are not guaranteed | UK: DPF UK Extension and/or UK Addendum · EU: SCCs and/or DPF |
| Stripe, LLC and its affiliates | Processes payments, subscriptions and invoices | Billing contact name and email address, organization name, billing address and tax ID, payment details | Worldwide (Stripe) | UK: DPF UK Extension and/or UK Addendum · EU: SCCs and/or DPF |
Independent controllers
They receive personal data for their own purposes, under their own privacy policies.
| Company | What it does | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Stripe, LLC and its affiliates | Fraud prevention and anti-money-laundering checks, for its own purposes | Payment details, billing contact, device and transaction data | Worldwide (Stripe) | UK: DPF UK Extension and/or UK Addendum · EU: SCCs and/or DPF |
| Microsoft Ireland Operations Ltd and Microsoft Corporation | Microsoft Clarity analytics: masked session recordings and heatmaps, only after consent | Masked page interactions, device and browser data, Clarity cookies; in the web app, user id and role | Ireland and the United States | UK: DPF UK Extension and/or UK Addendum · EU: SCCs and/or DPF |
Your organization's own tools
They receive data only if your organization connects them, under your organization's own agreement with the vendor.
| Company | What it does | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Slack Technologies, LLC | Slack app (notifications, digests, commands and directory import), sign-in with Slack | Names, email addresses, job titles, departments, leave dates and types | Under your organization's agreement with the vendor | Your organization's own agreement with the vendor |
| Google LLC | Google Calendar sync, Google Chat app, sign-in with Google | Names, email addresses, leave dates and types, calendar events | Under your organization's agreement with the vendor | Your organization's own agreement with the vendor |
| Microsoft Corporation | Outlook calendar sync, Microsoft Teams app, sign-in with Microsoft | Names, email addresses, leave dates and types, calendar events | Under your organization's agreement with the vendor | Your organization's own agreement with the vendor |