A

Afi

Afi provides cloud backup and recovery solutions for Google Workspace, Microsoft 365, Kubernetes, AWS, and Azure.

vendor	purpose	evidence
A Alphabet Inc. Mountain View, CA	Hosting application and storing backup data	“Alphabet Inc. Google Cloud Platform (GCP) is a cloud computing service. GCP is compliant with SOC 1/2/3, ISO/IEC 27001, PCI DSS and other major security regulations. Afi uses GCP to host its container-based distributed application using Google Kubernetes engine, as well as to store the backup data using encrypted geo-redundant cloud storage.” source
A Amazon.com, Inc. Seattle, WA	Hosting application and storing backup data	“Amazon.com, Inc. Amazon Web Services (AWS) is a subsidiary of Amazon providing an on-demand cloud computing service. AWS is compliant with SOC 1/2/3, ISO/IEC 27001, PCI DSS and other major security regulations. We use Amazon Elastic Kubernetes Service to host our application, and store the backup data using encrypted geo-redundant cloud storage.” source
H HubSpot, Inc. Cambridge, MA	CRM for sales and support	“HubSpot, Inc. HubSpot provides tools for customer relationship management (CRM), support, sales and marketing automation. It has TRUSTe certification for Enterprise Privacy, it is SOC 2/3 compliant and its IT systems are audited as part of the Sarbanes-Oxley compliance. Afi uses HubSpot CRM to manage and automate the sales and support processes.” source
M Mailgun San Antonio, TX	Email communication with limited customer data	“Mailgun Technologies, Inc. Mailgun cloud email system helps deliver automated email communications. If you enable email notifications and/or configure backup alerts in the Afi web application, we use the Mailgun service to send you email messages. Mailgun has SOC 2 and ISO 27001 certifications. Customer information transferred to Mailgun is strictly limited to the service email message contents and the email addresses they are sent to.” source
S Sentry San Francisco, CA	Application performance and error tracking	“Afi Customers have the option to opt in to send anonymous error reports, helping us diagnose and resolve technical issues faster.” source
S Stripe San Francisco, CA	Payment processing with financial data	“Stripe, Inc. Stripe offers payment processing and anti-fraud tools which Afi uses to accept payments from customers, manage subscriptions, and keep its tax and financial records. Stripe has SOC 1 and SOC 2 Type II certifications, and it is certified as a PCI Level 1 Service Provider, which is the most stringent level of certification available in the payments industry.” source
Z Zendesk San Francisco, CA	Customer support ticket management	“Zendesk, Inc. Zendesk is a cloud helpdesk software provider. It is compliant with SOC 2/3, ISO 27001. Afi uses Zendesk to accept customer support tickets, manage and automate the technical support services.” source

• A

  Alphabet Inc.

  Mountain View, CA

  Hosting application and storing backup data

  “Alphabet Inc. Google Cloud Platform (GCP) is a cloud computing service. GCP is compliant with SOC 1/2/3, ISO/IEC 27001, PCI DSS and other major security regulations. Afi uses GCP to host its container-based distributed application using Google Kubernetes engine, as well as to store the backup data using encrypted geo-redundant cloud storage.” source

• A

  Amazon.com, Inc.

  Seattle, WA

  Hosting application and storing backup data

  “Amazon.com, Inc. Amazon Web Services (AWS) is a subsidiary of Amazon providing an on-demand cloud computing service. AWS is compliant with SOC 1/2/3, ISO/IEC 27001, PCI DSS and other major security regulations. We use Amazon Elastic Kubernetes Service to host our application, and store the backup data using encrypted geo-redundant cloud storage.” source

• H

  HubSpot, Inc.

  Cambridge, MA

  CRM for sales and support

  “HubSpot, Inc. HubSpot provides tools for customer relationship management (CRM), support, sales and marketing automation. It has TRUSTe certification for Enterprise Privacy, it is SOC 2/3 compliant and its IT systems are audited as part of the Sarbanes-Oxley compliance. Afi uses HubSpot CRM to manage and automate the sales and support processes.” source

• M

  Mailgun

  San Antonio, TX

  Email communication with limited customer data

  “Mailgun Technologies, Inc. Mailgun cloud email system helps deliver automated email communications. If you enable email notifications and/or configure backup alerts in the Afi web application, we use the Mailgun service to send you email messages. Mailgun has SOC 2 and ISO 27001 certifications. Customer information transferred to Mailgun is strictly limited to the service email message contents and the email addresses they are sent to.” source

• S

  Sentry

  San Francisco, CA

  Application performance and error tracking

  “Afi Customers have the option to opt in to send anonymous error reports, helping us diagnose and resolve technical issues faster.” source

• S

  Stripe

  San Francisco, CA

  Payment processing with financial data

  “Stripe, Inc. Stripe offers payment processing and anti-fraud tools which Afi uses to accept payments from customers, manage subscriptions, and keep its tax and financial records. Stripe has SOC 1 and SOC 2 Type II certifications, and it is certified as a PCI Level 1 Service Provider, which is the most stringent level of certification available in the payments industry.” source

• Z

  Zendesk

  San Francisco, CA

  Customer support ticket management

  “Zendesk, Inc. Zendesk is a cloud helpdesk software provider. It is compliant with SOC 2/3, ISO 27001. Afi uses Zendesk to accept customer support tickets, manage and automate the technical support services.” source