Subprocessors & Infrastructure­ Providers

Transparency in accordance with Art. 28 GDPR.

Overview

FinSuites, LLC ("FinSuites") provides its services as a processor within the meaning of Art. 28 GDPR where personal data is processed on behalf of customers, and uses vetted subprocessors that support the provision, operation, security and development of the services.

This page provides a current overview of the subprocessors in accordance with Art. 28 GDPR. Subprocessors process personal data exclusively on documented instructions from FinSuites or as required by law, and are contractually bound to data protection obligations no less protective than those of the FinSuites Data Processing Agreement (DPA).

Depending on the services used and the configurations chosen by the customer, subprocessors may process contact data, communication metadata, usage data, technical identifiers and limited transaction metadata.

Core platform & infrastructure

Note: FinSuites operates its services as a white-label implementation of the GoHighLevel / LeadConnector platform. GoHighLevel is responsible for the underlying technical infrastructure and may use additional infrastructure or technology providers as subprocessors under its own data processing agreements and applicable data protection law.

Payments & billing

FinSuites does not store full payment card data.

Email, messaging & telephony

Processing only where enabled and configured by the customer.

Processing by these subprocessors only takes place where enabled by the customer, and exclusively for the purposes selected and configured within the services.

Analytics, advertising & tracking

Processing only where enabled and configured by the customer.

The use of analytics and advertising subprocessors is subject to the customer's configuration choices and applicable consent requirements.

Support & communication

Customer-enabled integrations & marketplace applications

Customers may, at their own discretion, enable additional third-party integrations or marketplace applications. Such third parties act as independent controllers or processors under their own terms and privacy policies. FinSuites is not responsible for the data processing practices of customer-enabled integrations.

International data transfers

Where personal data is processed outside the European Economic Area, FinSuites relies on appropriate safeguards, in particular the EU-U.S. Data Privacy Framework (DPF), where applicable, and/or the Standard Contractual Clauses (SCCs) adopted by the European Commission. Where a subprocessor is not certified under the DPF, FinSuites relies on Standard Contractual Clauses or equivalent safeguards. For onward transfers by subprocessors, equivalent safeguards are required contractually.

Changes to subprocessors

FinSuites may add or replace subprocessors from time to time. Where required by applicable data protection law, FinSuites will provide advance notice of material changes. Customers may object to a new subprocessor only on documented and reasonable data protection grounds. Objections must be raised within fourteen (14) days of receipt of the notice about the new subprocessor. If no commercially reasonable alternative exists, the customer's sole remedy is to terminate the services in accordance with the Terms & Conditions.

Updates

This subprocessor list may be updated from time to time. The current version is always available on this page.

Contact