Last updated March 2025
Rewind partners with select subprocessors to support the delivery of our products and services. A subprocessor is a third-party entity that processes personal data on Rewind’s behalf.
We ensure that all subprocessors comply with security, privacy, confidentiality, and regulatory standards, as outlined in Rewind’s Terms of Service and Privacy Notice. Before engaging a subprocessor, we conduct thorough assessments to confirm compliance with applicable data protection laws. We also perform regular reviews to maintain these standards and adapt to evolving requirements.
Where applicable, Standard Contractual Clauses (SCCs) govern data transfers between the EU and non-EU countries to ensure lawful cross-border processing.
Stay Updated:
- 🔄 This webpage reflects the latest subprocessor list.
- 📩 Subscribe to updates at security.rewind.com to receive notifications of changes.
- 📧 For inquiries, contact privacy@rewind.io.
Capitalized terms have the meanings defined in the Rewind Terms of Service, Data Processing Agreement (DPA), and Privacy Notice.
To enhance clarity and transparency, we’ve restructured our list of subprocessors into the following categories: Infrastructure & Security, Platform Specific, General Operations, and Subprocessors for Specific Services.
Infrastructure & security
These subprocessors provide essential infrastructure and security services to ensure the reliability and protection of our offerings:
| Subprocessor | Data Type | Purpose | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Customer Content, Customer Account Data, Customer Usage Data | Infrastructure provider, including hosting services, storage, and support | USA, Europe (Ireland, Germany), Canada, Australia |
| Honeybadger | System and event logs only | Monitoring and error reporting of platform and related services | USA |
| New Relic | System and event logs only | Monitoring and error reporting of platform and related services | USA |
Platform specific
These subprocessors are specifically utilized on the Rewind App, data collected using these subprocessors is de-identified whenever possible:
| Subprocessor | Data Type | Purpose | Location |
|---|---|---|---|
| Microsoft Clarity | Customer Usage Data | Heatmaps & user experience tracking | USA |
| Appcues | Customer Account Data, Customer Usage Data | User onboarding & in-app guidance | USA |
Specific services
These subprocessors are engaged in supporting specific features, such as Rewind Alerts and Rewind Monitor products:
| Subprocessor | Applicable Service | Data Type | Purpose | Location |
|---|---|---|---|---|
| Gadget | Rewind Alerts | Customer Account Data, Customer Usage Data | Development platform | Canada, USA |
| Pixel Union | Rewind Monitor | Customer Account Data, Customer Usage Data | Deliver, manage, and maintain application | Canada, USA |
General operations
These subprocessors support our general business operations, including customer relationship management, internal communications, and payment processing:
| Subprocessor | Data Type | Purpose | Location |
|---|---|---|---|
| Ada | Customer Account Data | Customer support and communication | Canada, USA |
| DocuSign | Customer Account Data | Electronic agreements | USA |
| GitHub | System and event logs, Customer Usage Data | Issue tracking | USA |
| Google Cloud Platform (BigQuery) | System and event logs, Customer Account Data, Customer Usage Data | Internal reporting and analytics in a data warehouse | Canada, USA |
| HubSpot | Customer Account Data | Customer relationship management | USA |
| Salesforce | Customer Account Data | Customer relationship management | Canada |
| Segment (Twilio) | Customer Usage Data | Product analytics | USA |
| SendGrid (Twilio) | Customer Account Data | Email infrastructure | USA |
| Slack | Customer Account Data | Internal communications | USA |
| Stripe | Customer Account Data | Payment collection and handling | USA |
| Zendesk | Customer Account Data | Customer relationship management | USA |
Employment
Rewind may use the following subprocessors when managing job applications:
| Subprocessor | Data Type | Purpose | Location |
|---|---|---|---|
| Calendly | Applicant Contact Information | Scheduling interviews and recruitment meetings | USA |
| Docusign | Employee and Applicant Information | Electronic signing of contracts and agreements | USA |
| LinkedIn Recruiter | Applicant Information | Talent sourcing and candidate outreach | USA |
| Smart Recruiters | Applicant Information | Applicant tracking and hiring process management | USA |
Note: We regularly review all subprocessors to ensure they meet our stringent requirements for security, privacy, confidentiality, and compliance with applicable data protection laws. Any updates to this list will be made via this webpage. You can also subscribe to notifications at security.rewind.com for updates. If you have questions about our subprocessors, please reach out to privacy@rewind.io.
Update Log:
21 March 2025 – removed Intercom, added general and platform specific subprocessors, updated vendor names and added categories to improve clarity and transparency
28 March 2024 – provided additional details on processing