Krystal Hosting Ltd
- What they do
- Hosting: the servers that run Shamrock Comply, the database, uploaded files and backups
- Data
- All data held in Shamrock Comply
- Where
- Amsterdam, Netherlands (EU)
- Used for
- All customers
Resend (Plus Five Five, Inc.)
- What they do
- Delivers the emails the system sends: invitations, password resets and alerts
- Data
- Recipients' names and email addresses, and the content of the email, which can include a short description of the alert (for example, whose certificate is expiring)
- Where
- Emails are sent from Resend's Ireland (EU) region. Resend is a US company and keeps its records of sent emails, including addresses and delivery logs, in the United States.
- Used for
- All customers
MailChannels
- What they do
- A backup route only: if Resend can't take an email, our host's own mail system sends it instead, and the host routes its outgoing email through MailChannels
- Data
- Recipients' names and email addresses, and the content of the email, which can include a short description of the alert (for example, whose certificate is expiring)
- Where
- Canada and the United States
- Used for
- All customers, only for emails sent by the backup route
Anthropic, PBC
- What they do
- Powers the optional AI assistant and the optional certificate card reading
- Data
- A manager's question, and the records needed to answer it (for example, names with training or attendance status). For card reading, a photo of a training certificate, which shows the worker's name, the certificate number and often their photo.
- Where
- United States
- Used for
- Only customers who turn on the AI assistant or card reading. Both are off by default and switched on separately.
Phone and browser push services
- What they do
- Deliver notifications to people who turn them on: Google (Firebase Cloud Messaging, for Chrome and Android), Apple (iPhone and Safari), Mozilla (Firefox) or Microsoft (Edge on Windows), depending on the person's phone or browser
- Data
- Browser notifications are encrypted, so the push service can't read them; it sees only the phone's push address, when the message was sent and its size. In the iPhone app, Apple delivers the notification's title and short text (for example "New document to sign") over its own encrypted connection; nothing else about the person is sent.
- Where
- May be outside the EU, depending on the service
- Used for
- Only people who turn on notifications on a phone or browser
Transfers outside the EU
Where a sub-processor handles data outside the EU or a country the EU recognises as protecting data adequately, the transfer is covered by the safeguards the GDPR requires, as set out in our data processing agreement.
Other services your browser connects to
The text font used by the app and this website is loaded from Google Fonts, so a visitor's browser connects to Google's servers to fetch it. Google receives the visitor's IP address, but no data held in Shamrock Comply.
Questions
Email info@shamrockehs.com. See also data protection.