Transparency
OcuDigital is committed to transparency in data practices, regulatory compliance, and how we manage the services and vendors that support our operations. This page outlines our Digital Services Act (DSA) compliance reporting and provides detailed information on all current sub-processors.
DSA Transparency Reports
As part of our obligations under the EU Digital Services Act, we publish annual transparency reports outlining how we handle content moderation, user notices, and enforcement of platform rules. All published reports are available below.
Sub-Processor Information
Below is a list of sub-processors used by our organization, along with links to their General Data Protection Regulation (GDPR) compliance information and Data Processing Agreements (DPAs), and a brief note on what each service is used for.
1. Google Cloud Platform (GCP)
Used for cloud infrastructure, storage, compute, and various backend services.
- Location: Canada
- GDPR Info: Google Cloud Privacy & Security
- DPA: Cloud Data Processing Addendum
2. Amazon Web Services (AWS)
Used for storage of backups.
- Location: Canada
- GDPR Info: AWS GDPR Center
- DPA: AWS Data Processing Addendum
3. Mailgun
Used for sending transactional emails programmatically.
- Location: USA
- GDPR Info: Mailgun GDPR Compliance
- DPA: Mailgun Data Processing Agreement
4. Stripe
Used for processing online payments and managing subscription billing.
- Location: USA
- GDPR Info: Stripe Privacy Center
- DPA: Stripe Data Processing Agreement
5. Help Scout
Used for customer support ticketing and communication management.
- Location: USA
- GDPR Info: Help Scout Security
- DPA: Help Scout Data Processing Amendment
6. Brevo
Used for email marketing campaigns, newsletters, and customer communications.
- Location: USA
- GDPR Info: Brevo GDPR Compliance
- DPA: Brevo Data Processing Agreement
7. QuickBooks Online
Used for financial accounting, payroll, and bookkeeping operations.
- Location: Canada
- GDPR Info: QuickBooks GDPR Centre
- DPA: QuickBooks Time and Payroll Data Processing Agreement