<aside> ⏰

Last updated: 2025-12-09

</aside>

Elevo shares certain information with external companies that, under the GDPR, are considered subprocessors. For each subprocessor:

• we always share the minimum amount of information necessary to fulfill the specific purpose;
• we have reviewed and validated their security measures and GDPR compliance.

<aside> 🇺🇸 Data transfers to the United States

• On July 10, 2023, the European Commission determined that the United States ensures an adequate level of protection for personal data equivalent to that of the European Union. Transfers of personal data from the EU to certified U.S. entities may therefore occur freely, without additional safeguards (source).
• It is important to note that no HR-related data (reviews, goals, comments) is ever transferred to U.S. hosting providers. However, certain personal data (such as email, name, and role) may be transmitted for application users. Such transfers are governed by specific Data Processing Agreements (DPAs) with each relevant provider. </aside>

List of Subprocessors