Sub-processors

Last updated November 5th 2023

The Huma Sub-processors list (“Sub-processors”) accompanies the Huma Subscription Terms of Service (the "Agreement") entered into between you ("Customer") and Huma.

Huma is a data processor and engages certain onward sub-processors that may process personal data submitted to Huma’s services by the controller.

We assess the processors we engage, selecting reputable, global service providers, who provide safeguarding agreements to guarantee sufficient protection of such Customer data as they process on our behalf.

These sub-processors are listed below. This list may be updated by Huma from time to time

Name	Purpose	Data processed in	Data Processing Agreement	Business address
Heroku	Hosting of the services API	Europe - Ireland	Salesforce Data Processing Addendum	415 Mission Street Suite 300 94105, San Francisco, CA
Neo4j Aura	Hosting of database for the services	Europe - Belgium/Ireland (Europe West 1)	Neo4j Aura Terms of Service, section 4	Viktualienmarkt 8 c/o WorkRepublic 80331 München, Germany
MongoDB Atlas	Hosting of database for the services	Europe - Ireland (eu-west-1)	MongoDB Data Processing Agreement	Building Two Number One Ballsbridge Dublin 4, Ireland
Amazon AWS	Hosting of database for the services Hosting of files uploaded as Documents and uploaded images used elsewhere in the services	Europe - Ireland (eu-west-1)	AWS Data Processing Addendum	Burlington Plaza Burlington Rd, Saint Peter's Dublin 4, Ireland
Auth0	Authentication with OTP	Europe - Frankfurt	Auth0 Data Processing Addendum	Union House 182-194 Union St London SE1 0LH, United Kingdom
Recurly	Management of payment information for subscription billing	United States - Virginia and Oregon	Recurly Data Processing Addendum	400 Alabama Street, Suite 202 San Francisco, CA 94110, US
Mailgun	Sending automated e-mail notifications from the services to users	Europe	Mailgun Data Processing Agreement	San Antonio HQ 112 E Pecan St. #1135 San Antonio, TX 78205
Hubspot	In-service support	United States	HubSpot Data Processing Agreement	Dublin (European HQ) Address 1 Sir John Rogerson's Quay, Dublin 2
Fastly	Content Delivery Network for all API traffic	Global, by proximity to user location	Data Processing Terms \| Fastly	Fastly London floor 3, 90 Tottenham Court rd, London W1T 4TJ, UK
Imgix	Processing and caching of images	United States	Request Imgix support for most recent version	San Francisco 423 Tehama St
Rapid7 InsightOps	Audit log	Europe	Rapid7 DPA	Dublin George's Quay Plaza Dublin, 2
OpenAI	Content Assistant	United States	OpenAI DPA	San Francisco 3180 18th St United States