Welcome to CTS’s list of Sub processors authorised to process its customer data to provide its contractual obligations. CTS imposes data protection terms with each Sub processor regarding their security controls and applicable regulations for the protection of personal data.

 

 

Company Safeguards

 

CTS requires all sub-processors to satisfy equivalent obligations as those required from CTS (as Data Processors) as set forth in the contract and in line with the Data Processing Agreement (“DPA’”), including but not limited to the requirements to:

• Process Personal Data in accordance with data controller’s instructions
• In connection with their sub-processing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws;
• Provide regular training in security and data protection to personnel to whom they grant access to Personal Data;
• Implement and maintain appropriate technical and organizational measures and provide an annual certification that evidences compliance with this obligation.
• Promptly inform CTS about any actual or potential security breach; and
• Cooperate with CTS in order to deal with requests from data controllers, data subjects or data protection authorities, as applicable.

 

 

CTS Data Sub-Processors

 

These Data Sub processors apply to all customers who utilize the CTS platforms and are agnostic of product utilisation.

–

 

Entities

 

­ CBS (City Business Solutions)

Entity Type: Managed Service Provider

Entity Location: UK

Data Location: all data held within the EEA

 

Sprout IT (Sprout technologies Ltd)

Entity Type: Managed Service Provider

Entity Location: UK

Data Location: all data held within the EEA

 

Sprout NZ

Entity Type: 24/7 Support Service Provider

Entity Location: New Zealand

Data Location: all data held within the EEA

New Zealand meets EU GDPR adequacy requirements

 

Exponential-e

Entity Type: Cloud Service Provider

Entity Location: UK

Data Location: all data held within the EEA

 

Office 365

Entity Type: hosting Microsoft, all Office 365 services

Entity Location: UK

Data Location: all data held within the EEA

 

CTera – Redstore

Entity Type: Cloud data backup services

Entity Location: UK

Data Location: all data held within the EEA

 

DataStore 365

Entity Type: Cloud data storage services

Entity Location: UK

Data Location: all data held within the EEA

 

DataSafe – LiveDrive

Entity Type: Cloud data storage services

Entity Location: UK

Data Location: all data held within the EEA

 

CTS Email filtering

Entity Type: Mail services

Entity Location: UK

Data Location: all data held within the EEA

 

Proofpoint

Entity Type: email security

Entity Location: US

Data Location: all data held within the EEA

 

Mimecast

Entity Type: Email security and filtering services

Entity Location: UK

Data Location: all data held within the EEA

 

BitTitan

Entity Type: O365 migration tool

Entity Location: UK

Data Location: all data held within the EEA

 

CTSnet/CTSmail

Entity Type: Email hosting services

Entity Location: UK

Data Location: all data held within the EEA

 

Volta Datacentre

Entity Type: Data Centre

Entity Location: UK

Data Location: all data held within the EEA

 

Node-4

Entity Type: Data Centre

Entity Location: UK

Data Location: all data held within the EEA

 

Datum

Entity Type: Data Centre

Entity Location: UK

Data Location: all data held within the EEA

 

Virtus

Entity Type: Data Centre

Entity Location: UK

Data Location: all data held within the EEA

 

Tresorit

Entity Type: Data Centre

Entity Location: Switzerland

Data Location: all data held within the EEA

 

AI Networks

Entity Type: Network Service Provider

Entity Location: UK

Data Location: all data held within the EEA

 

Talk Talk Business

Entity Type: Network Service Provider

Entity Location: UK

Data Location: all data held within the EEA

 

Citrix

Entity Type: Service Provider

Entity Location: UK

Data Location: all data held within the EEA