Where data is processed
The table below shows, for each subprocessor, the country or region where information is processed. Locations marked "to be confirmed" are being verified with the providers.
| Provider | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database, authentication and storage of attached files | To be confirmed (project region being verified) |
| Hostinger | Hosting of the application server, DNS and forwarding of email addresses | To be confirmed (server data centre being verified) |
| Resend (Plus Five Five, Inc.) | Sending the service’s emails | United States (us-east-1 region) |
| Sentry (Functional Software, Inc.) | Technical error monitoring | To be confirmed (United States or European Union) |
| GitHub, Inc. | Code hosting, continuous integration and storage of the encrypted database backups | United States |
| UptimeRobot s.r.o. | Service availability monitoring | European Union (backup in the United States) |
| Healthchecks.io (SIA Monkey See Monkey Do) | Monitoring of scheduled jobs (backups) | European Union |
| Google LLC (Google Analytics) | Audience measurement of the public website, only after your consent (never in the application) | United States and other countries |
| Google LLC (Gmail) | Receiving the messages sent to privacy@pigedeck.com and support@pigedeck.com (provider to be confirmed) | To be confirmed (United States and other countries) |
Safeguards
- Encryption: exchanges with Pigedeck are encrypted (HTTPS); the database and attached files are encrypted at rest by our provider.
- Isolation: each organization's data is isolated at the database level (row-level security); no organization can read another's.
- Backups: the database is backed up daily; backups are encrypted with a key held by Mormind Inc. and kept 90 days.
- Attached files: they are not backed up; keep your originals.
- No staff access to customer content, except where required by law or for a security incident, and then only as strictly necessary.
For your PIA (Quebec customers)
Before communicating personal information outside Quebec, a Quebec business must assess in particular the sensitivity of the information, the purposes of its use, the safeguards and the legal framework of the destination State (Law 25, s. 17). This page, the list of subprocessors and the Data Processing Annex of the terms of use provide the information we have. Questions: privacy@pigedeck.com.