This page identifies the sub-processors that process Customer Data on behalf of customers of the martinCRM SaaS application, and (separately) the service providers that handle visitor data on the marketing website. It is the authoritative list referred to from our Terms of Service and Privacy Policy.
1. Overview
We try to keep the number of third parties involved in the Service to a minimum. Where we use a sub-processor, we (a) require it to handle personal information consistently with the Australian Privacy Principles, (b) sign its data-protection addendum where one is offered, and (c) prefer providers that operate from Australia-based data centres.
2. Sub-processors of the SaaS application
These providers process Customer Data submitted to or generated by the martinCRM SaaS application. Each is a sub-processor under our Data Processing Addendum (/legal/dpa).
| Provider | Country | Purpose | Provider terms |
|---|---|---|---|
| Amazon Web Services, Inc. | Australia (Sydney, ap-southeast-2) | Hosting, application compute, database, file storage, identity (Cognito), content delivery | AWS Service Terms / AWS DPA |
| Amazon Simple Email Service (Amazon SES) | Australia (Sydney, ap-southeast-2) | Transactional email delivery from the SaaS application | Covered by the AWS Service Terms / AWS DPA above |
The martinCRM SaaS application does not embed third-party behavioural analytics. There is no other sub-processor of Customer Data at this time.
3. Service providers for the marketing website
These providers help us operate the public marketing website at martincrm.com.au. They process visitor data (such as IP address, page views, and waitlist submissions) — they do not process Customer Data submitted to the SaaS application.
| Provider | Country | Purpose | Provider terms |
|---|---|---|---|
| Amazon Web Services, Inc. | Australia (Sydney, ap-southeast-2) | Hosting and content delivery for the marketing website | See AWS DPA above |
| PostHog Inc. | United States | Visitor analytics on the marketing website only | PostHog Privacy Policy / PostHog DPA |
| Amazon Simple Email Service (Amazon SES) | Australia (Sydney, ap-southeast-2) | Occasional marketing and waitlist-update emails | See AWS DPA above |
4. Changes to this list
We may add, replace or remove sub-processors of the SaaS application from time to time. Where the change affects the processing of Customer Data, we will give the Customer at least 30 days’ notice (by email to the account’s primary administrator and a notice on this page) before the change takes effect. If the Customer reasonably objects and we cannot accommodate the objection within 30 days, the Customer may terminate the affected subscription and receive a pro-rata refund of pre-paid unused fees, in accordance with the Terms of Service.
Changes to marketing-website service providers are made at our discretion and will be reflected here without individual notice.
5. Questions
For questions about a sub-processor, the safeguards we apply, or to request our completed security questionnaire, email legal@martincrm.com.au.