Sub-Processors Used by DrugBank

Please see the below list of sub-processors that DrugBank has engaged with, the country they operate from, and the service(s) they provide.

Sub-Processor	Applicable Services	Nature and Purpose of Processing	Categories of Personal Information	Processing Location(s)	Security Overview
Airbrake Technologies, Inc.	All DrugBank Products	Application monitoring and error reporting	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	Security Overview
Amazon Web Services, Inc.	All DrugBank Products	File storage and backups (Amazon Simple Storage Service)	Encrypted Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	Amazon AWS Compliance Program
Atlassian, Inc.	All DrugBank Products	Customer service and support	Personal Information contained in user account information and user-submitted data through support requests and emails	USA	Atlassian Security Measures
Chili Piper, Inc.	DrugBank Website	Contact and meeting booking	Personal Information contained in form submissions	USA	Security Overview
Cloudflare, Ltd.	All DrugBank Products	Content delivery network (CDN) provider	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	Customer traffic is processed globally at the data center closest to the end user.	Certifications and Compliance Resources
Datadog, Inc.	All DrugBank Products	Application and infrastructure monitoring	Personal Information contained in application logged requests	USA	Datadog Security & Compliance
Dovetail, Inc.	All DrugBank Products	Customer service and support	Personal Information contained in text or files created by customer	USA	Dovetail Security
GitHub, Inc.	All DrugBank Products	Database backups and data processing	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	GitHub Security
Google, Inc.	All DrugBank Products	Cloud hosting provider	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services; Personal Information contained in application logged requests	USA	Google Privacy Terms & Security Measures
Hotjar, Inc.	DrugBank Website	Customer service and support	Personal Information contained in text or files created by customer (E.g. feedback forms)	USA	Security at Hotjar
HubSpot, Inc.	DrugBank Website and Clinical API	Customer service and support	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	HubSpot Security Program
K15t GmbH	Support Center	Customer service and support	Personal Information contained in support center search and page views	Germany	K15t Trust Center
Mailgun Technologies, Inc.	DrugBank	Communications technology provider for product notifications	Personal Information contained in product notice communications	USA, EEA	Mailgun’s Commitment to Security and Compliance
Metabase, Inc.	All DrugBank Products	Infrastructure provider to enable customer data querying, and analytics	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	Metabase Security Overview (We Don’t Want Your Data)
Slack Technologies, LLC	All Applicable Services	Customer service and support	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	Security at Slack
Stripe, Inc.	Clinical API	Payment processing	Personal Information contained in user account information (limited to company name and email, we do not store payment information)	USA	Security at Stripe
TrafficCake, Ltd.	All DrugBank Products	Application monitoring and incident notifications	Personal Information contained in product notice communications	UK	Terms of Service
WorkOS, Inc.	DrugBank Website	Account authentication and Single Sign-On	Personal Information contained in user account information, limited to email address and name.	USA	WorkOS Security Overview
ZoomInfo Technologies, LLC	All DrugBank Products	Customer service and support	Personal Information contained in text or files created by customer	USA	ZoomInfo Trust Center

DrugBank is committed to ensuring that all of its sub-processors have the appropriate legal and security safeguards in place to ensure that your data will remain protected to the highest standards. This includes signing a Data Processing Agreement (together with Standard Contractual Clauses, where applicable) with all of our sub-processors and ensuring they all have supplementary measures in place, where applicable.