Illizeo — Header EN (preview mega-menus)
Sub-processors

Illizeo
sub-processors.

In accordance with article 28 of GDPR, here is the up-to-date list of sub-processors involved in providing our Illizeo Cloud Solutions SaaS services.

Version August 2026 GDPR art. 28 & FADP compliant

Background

Illizeo places the highest importance on protecting the personal data of its customers and their employees. In accordance with article 28 of GDPR, Illizeo ensures all its sub-processors meet the same legal, contractual and technical requirements as Illizeo itself.

Contractual scope: the sub-processors below operate within the provision, maintenance and support of our services. They may access certain data under conditions strictly framed by contracts compliant with GDPR art. 28 and the Swiss FADP. Some are optional (e-signature, SSO).

Sub-processors involved in processing

Sub-processor
Country
Service type
Data concerned
Safeguards
Infomaniak Network SA
Core
🇨🇭 Switzerland
Cloud hosting, databases, backups
HR data, customer documents, configuration files
100% Swiss hosting, GDPR & FADP, ISO 27001
Microsoft Ireland Operations Ltd.
Optional — SSO
🇪🇺 EU
Authentication (Entra ID), document storage (OneDrive), collaboration tools
Identifiers, access metadata, internal documents
EU hosting, GDPR, ISO 27001
Atlassian Pty Ltd.
Core
🇪🇺 / 🇺🇸
Tickets and project documentation (Jira, Confluence)
Contact data, support ticket content
Standard Contractual Clauses, GDPR
Google Ireland Ltd.
Core
🇪🇺 EU
Internal collaboration tools (Google Workspace)
Internal Illizeo data only
GDPR, ISO 27001
Google Maps Platform (Google Ireland Ltd.)
Optional — Addresses & mileage
🇪🇺 / 🇺🇸
Address autocomplete and geocoding (Places, Geocoding) for profiles and mileage expense claims
Addresses entered, trip start and end points, geographic coordinates
SCCs, EU-US and CH-US frameworks, API key restrictions
DocuSign Inc.
Optional — Signature
🇪🇺 / 🇺🇸
Electronic signature of contracts
Last name, first name, email, signature, signed-document metadata
SCCs, GDPR, ISO 27001
Adobe Inc. (Adobe Sign)
Optional — Signature
🇪🇺 / 🇺🇸
Alternative electronic signature
Last name, first name, email, electronic signature
SCCs, GDPR
UgoSign
Optional — Signature
🇫🇷 FR
Alternative electronic signatures (eIDAS compliant)
First name, last name, email, electronic signature
GDPR, processing and hosting in France
Okta Inc.
Optional — SSO
🇪🇺 / 🇺🇸
Authentication and identity management (SSO)
Identifiers, login metadata
SCCs, GDPR
Veryfi, Inc.
Optional — Expense claims
🇺🇸 USA
OCR and automatic data extraction from expense receipts and supporting documents
Receipt and supporting-document images, extracted data (merchant, amounts, dates, VAT), user identifier
SCCs, administrative, technical and physical safeguards
Slack Technologies Ltd. (Salesforce)
Optional — Notifications
🇪🇺 / 🇺🇸
Notifications and approval requests in the customer’s Slack workspace
First name, last name, work email address, notification content (absences, expense claims, approvals)
SCCs, EU-US and CH-US frameworks, app installed by the customer in their own workspace
Zoom Communications, Inc.
Optional — Video meetings
🇪🇺 / 🇺🇸
Creation and management of interview video meetings (recruitment, reviews)
Participants’ first name, last name and email address, meeting subject and times
SCCs, EU-US and CH-US frameworks
LinkedIn Ireland Unlimited Company
Optional — Sign-in
🇪🇺 / 🇺🇸
Authentication via LinkedIn account (social sign-in)
LinkedIn identifier, first name, last name, email address
SCCs, EU-US and CH-US frameworks

Contractual obligations and compliance

Illizeo ensures that:

• Each sub-processor is bound by a sub-processing contract compliant with GDPR art. 28
• No data transfer outside the EU/Switzerland is performed without appropriate safeguards (SCCs, local hosting, or adequacy decision)
• Sub-processors implement robust technical and organisational measures
• Sub-processors only process data on documented instructions from Illizeo

Notifications and updates

Illizeo undertakes to inform its customers in advance of any change of sub-processor, giving them the opportunity to object in accordance with the DPA signed with Illizeo.

Living list: this page is kept continuously up to date and remains available at any time.

Contact

For any question regarding data protection and sub-processing:

Illizeo Sàrl
Chemin des Saules 12A, 1260 Nyon, Switzerland
dpo@illizeo.com

Legal hub

All our legal documents in one place.

Data Processing Addendum

The standard DPA we sign with our customers.

View →

Technical & Organisational Measures

Detail of the security measures we apply.

View →

Privacy Policy

How we collect, use and protect your data.

View →