Processors and subprocessors

Our software is made in-house and we manage our own servers. We also use external services of partners to process (personal) data. This page shows an overview of the currently used processors and sub-processors.

Processors are used to process customer and user data for Picqer. Subprocessors are used to process data you add to Picqer, for example, data of your customers or suppliers.

We have Data Processing Agreements with all these parties, documenting the way data is processed and secured. These agreements are at least as tight as our agreement with you in the Data Processing Agreement you sign for Picqer.


Most important processors

Amazon Web Services, Inc

processor subprocessor

Most of our infrastructure is hosted at Amazon Web Services, at datacenters within the European Economic Area.

AWS is ISO 9001, ISO 27001, ISO 27017, ISO 27018, SOC 1 and SOC 2 certified.

https://aws.amazon.com/compliance/gdpr-center/

DigitalOcean, LLC

processor subprocessor

Some of our infrastructure is hosted at DigitalOcean, in datacenters within the European Economic Area.

DigitalOcean is ISO 27001, SOC 1 and SOC 2 certified.

https://www.digitalocean.com/security/

FrontApp, Inc

processor subprocessor

We use Front to manage our email addresses such as info@picqer.com and support@picqer.com. If you send us an email, the data will be stored in Front.

FrontApp is ISO 27001 and SOC 2 Type II certified.

https://help.front.com/t/m22vyb/front-is-gdpr-ready

Postmark (AC PM LLC)

processor subprocessor

We use Postmark to send emails to your customers and suppliers from within Picqer. Postmark is operated by AC PM LLC, an ActiveCampaign company.

Postmark uses servers in the USA. The transfer of personal data to the USA is covered by the EU-U.S. Data Privacy Framework, to which ActiveCampaign is certified, and by the Standard Contractual Clauses in their Data Processing Addendum. Their datacenters are SOC 2 Type 2 certified.

https://postmarkapp.com/eu-privacy

PrintNode Ltd.

subprocessor

We use PrintNode to print picklists, shipping labels, location labels and product labels. We send the documents to PrintNode's servers, which in turn send the documents to your computer.

Close (Elastic Inc)

processor

We use Close to manage data of people who are interested in Picqer, and process emails sent to sales@picqer.com.

https://www.close.com/gdpr


Other processors

Basecamp (37signals LLC)

processor

We use Basecamp for our internal collaboration, projects and documents. We do not store data from your Picqer account here, but data about you as a customer may appear, for example when we discuss a question of yours internally.

Insight Hub (SmartBear Software, Inc.)

processor subprocessor

Errors that occur in Picqer are sent to Insight Hub (formerly Bugsnag), to help us discover them as soon as possible. We try to collect the least amount of personal data possible, but sometimes some personal data might be sent along.

Google Workspace (Google Ireland Limited)

processor subprocessor

We use Google Workspace for personal email addresses and as storage for internal documents.

Mailchimp (The Rocket Science Group LLC)

processor

MailChimp is used for our monthly newsletters. They have access to your name and email address.

Moneybird B.V.

processor

We keep our financial administration in Moneybird. Your details as a Picqer customer are therefore stored in Moneybird.

Papertrail (SolarWinds Worldwide, LLC)

processor subprocessor

Logs are sent to Papertrail, to help us track events and help solve bugs. Sometimes personal data is sent along.

Slack (Slack Technologies, LLC)

processor subprocessor

We use Slack for our internal communications. We do not share personal data via Slack, but in case this might happen, we have an agreement on security and privacy.

Stripe (Stripe Payments Europe, Ltd)

processor

We use Stripe to process SEPA direct debit and credit card payments.

Recruitee (Recruitee B.V.)

processor

Job applications through picqer.com are processed in Recruitee. Your data is automatically deleted 180 days after your application.