F

Frontify AG

Frontify provides a platform for managing brand guidelines, assets, and knowledge, structured for AI and human use.

vendor	purpose	evidence
A Amazon Web Services Luxembourg, Germany, USA	Cloud service provider and AI services	“Amazon Web Services Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy, L-1855, Luxembourg, Luxembourg Cloud service provider and AI services, incl. Amazon Bedrock, Amazon Textract, and Amazon Rekognition to power the AI Features Data will be stored for the duration of the customer agreement Germany or USA (depending on the individual agreement between Frontify and the customer) All data that is necessary to run the Frontify Platform incl. all database data. Content Data for AI services Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source
A Amplitude USA, Germany	Anonymized product analytics	“Amplitude Amplitude Inc. 201 3rd Street, Suite 200, San Francisco, CA 94103, USA Anonymized product analytics Data will be anonymized after a logical second since data collection Germany IP address / Platform Usage Data (anonymized) Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source
D Datadog USA, Germany	Monitoring and observability of the Frontify Platform	“Datadog Datadog Inc. 620 8th Avenue, 45th Floor, New York, NY 10018-1741, USA Monitoring and observability of the Frontify Platform 30 days Germany Email address / IP address / Platform Usage Data Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source
E EverAfter Israel, Germany	Customer Hub operation	“EverAfter EverAfter AI Ltd 82 Yigal Alon, Tel Aviv, Israel 6789124 Customer Hub operation (incl. onboarding and enablement/ communication and updates/ self-Service support and education/ account management/ automated renewals for Growth and Self-Guided customers) Data will be stored for the duration of the customer agreement Germany Name / Email address / Scheduling & Calendar Information / Company name / Frontify User role / Unique User ID) / Legal Contact/ Billing contact Platform User No Adequate Jurisdiction” source
F Frontify Deutschland GmbH Germany	Support services	“Frontify Deutschland GmbH Frontify Deutschland GmbH Friedrich-Ebert-Anlage 36, 60325 Frankfurt am Main, Germany Support services Data will be stored for the duration of the customer agreement Germany Name / email address / Platform Usage Data Platform User No Adequate Jurisdiction” source
F Frontify Inc. USA	Support services	“Frontify Inc. Frontify Inc. 625 Broadway, Floor 12, New York, NY 10012, USA Support services Data will be stored for the duration of the customer agreement USA Name / email address / Platform Usage Data Platform User No SCC” source
F Frontify UK Ltd. United Kingdom	Support services	“Frontify UK Ltd. Frontify UK Ltd. 5 New Street Square, EC4A 3TW London, UK Support services Data will be stored for the duration of the customer agreement United Kingdom Name / email address / Platform Usage Data Platform User No Adequate Jurisdiction” source
I Intercom Ireland, USA	In-app support / User onboarding / Feedback collection / Product updates / Knowledge base	“Intercom Intercom R&D Unlimited Company 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2, Ireland In-app support / User onboarding / Feedback collection / Product updates / Knowledge base Data will be stored for the duration of the customer agreement USA Name / email address / Platform Usage Data Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source
L Langfuse Germany, Ireland	Monitoring and analysis of the AI Features’ input and outputs	“Langfuse Finto Technologies GmbH Gethsemanestr. 4, 10437, Berlin, Germany Monitoring and analysis of the AI Features’ input and outputs 90 days Ireland Content Data Platform User No Adequate Jurisdiction” source
M Microsoft Ireland, Germany	Azure AI services to power the AI Features	“Microsoft Microsoft Ireland Operations Limited One Microsoft Place, South Country Business Park, Leopardstown Dublin 18, D18P521, Ireland Azure AI services to power the AI Features 30 days Germany Content Data Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source
P Postmark USA	Transactional email service	“ActiveCampaign (Postmark) AC PM, LLC 1 N Dearborn Street, Suite 500, Chicago, IL 60602 Transactional email service 45 days USA email address / IP address / geographical location inferred from IP address (regional level) / opening status Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source
S Splunk USA, Germany	Security Information and Event Management tool (SIEM)	“Splunk Splunk LLC 250 Brannan Street, San Francisco, CA 94107, USA Security Information and Event Management tool (SIEM) 365 days Germany Email address / IP address / Platform Usage Data Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source
T TwicPics SAS France	Support services	“TwicPics SAS TwicPics SAS 10, rue de Penthievre, 75008 Paris, France Support services Data will be stored for the duration of the customer agreement France Name / email address / Platform Usage Data Platform User No Adequate Jurisdiction” source

• A

  Amazon Web Services

  Luxembourg, Germany, USA

  Cloud service provider and AI services

  “Amazon Web Services Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy, L-1855, Luxembourg, Luxembourg Cloud service provider and AI services, incl. Amazon Bedrock, Amazon Textract, and Amazon Rekognition to power the AI Features Data will be stored for the duration of the customer agreement Germany or USA (depending on the individual agreement between Frontify and the customer) All data that is necessary to run the Frontify Platform incl. all database data. Content Data for AI services Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source

• A

  Amplitude

  USA, Germany

  Anonymized product analytics

  “Amplitude Amplitude Inc. 201 3rd Street, Suite 200, San Francisco, CA 94103, USA Anonymized product analytics Data will be anonymized after a logical second since data collection Germany IP address / Platform Usage Data (anonymized) Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source

• D

  Datadog

  USA, Germany

  Monitoring and observability of the Frontify Platform

  “Datadog Datadog Inc. 620 8th Avenue, 45th Floor, New York, NY 10018-1741, USA Monitoring and observability of the Frontify Platform 30 days Germany Email address / IP address / Platform Usage Data Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source

• E

  EverAfter

  Israel, Germany

  Customer Hub operation

  “EverAfter EverAfter AI Ltd 82 Yigal Alon, Tel Aviv, Israel 6789124 Customer Hub operation (incl. onboarding and enablement/ communication and updates/ self-Service support and education/ account management/ automated renewals for Growth and Self-Guided customers) Data will be stored for the duration of the customer agreement Germany Name / Email address / Scheduling & Calendar Information / Company name / Frontify User role / Unique User ID) / Legal Contact/ Billing contact Platform User No Adequate Jurisdiction” source

• F

  Frontify Deutschland GmbH

  Germany

  Support services

  “Frontify Deutschland GmbH Frontify Deutschland GmbH Friedrich-Ebert-Anlage 36, 60325 Frankfurt am Main, Germany Support services Data will be stored for the duration of the customer agreement Germany Name / email address / Platform Usage Data Platform User No Adequate Jurisdiction” source

• F

  Frontify Inc.

  USA

  Support services

  “Frontify Inc. Frontify Inc. 625 Broadway, Floor 12, New York, NY 10012, USA Support services Data will be stored for the duration of the customer agreement USA Name / email address / Platform Usage Data Platform User No SCC” source

• F

  Frontify UK Ltd.

  United Kingdom

  Support services

  “Frontify UK Ltd. Frontify UK Ltd. 5 New Street Square, EC4A 3TW London, UK Support services Data will be stored for the duration of the customer agreement United Kingdom Name / email address / Platform Usage Data Platform User No Adequate Jurisdiction” source

• I

  Intercom

  Ireland, USA

  In-app support / User onboarding / Feedback collection / Product updates / Knowledge base

  “Intercom Intercom R&D Unlimited Company 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2, Ireland In-app support / User onboarding / Feedback collection / Product updates / Knowledge base Data will be stored for the duration of the customer agreement USA Name / email address / Platform Usage Data Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source

• L

  Langfuse

  Germany, Ireland

  Monitoring and analysis of the AI Features’ input and outputs

  “Langfuse Finto Technologies GmbH Gethsemanestr. 4, 10437, Berlin, Germany Monitoring and analysis of the AI Features’ input and outputs 90 days Ireland Content Data Platform User No Adequate Jurisdiction” source

• M

  Microsoft

  Ireland, Germany

  Azure AI services to power the AI Features

  “Microsoft Microsoft Ireland Operations Limited One Microsoft Place, South Country Business Park, Leopardstown Dublin 18, D18P521, Ireland Azure AI services to power the AI Features 30 days Germany Content Data Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source

• P

  Postmark

  USA

  Transactional email service

  “ActiveCampaign (Postmark) AC PM, LLC 1 N Dearborn Street, Suite 500, Chicago, IL 60602 Transactional email service 45 days USA email address / IP address / geographical location inferred from IP address (regional level) / opening status Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source

• S

  Splunk

  USA, Germany

  Security Information and Event Management tool (SIEM)

  “Splunk Splunk LLC 250 Brannan Street, San Francisco, CA 94107, USA Security Information and Event Management tool (SIEM) 365 days Germany Email address / IP address / Platform Usage Data Platform User No Adequate Jurisdiction (Provider is certified under the Data Privacy Framework)” source

• T

  TwicPics SAS

  France

  Support services

  “TwicPics SAS TwicPics SAS 10, rue de Penthievre, 75008 Paris, France Support services Data will be stored for the duration of the customer agreement France Name / email address / Platform Usage Data Platform User No Adequate Jurisdiction” source