Data Processing and Subprocessors

1.Current subprocessors

Stripe, Inc.

Payments, subscriptions, tax — United States / EU

Managed cloud database and storage provider

Application data, documents, photographs — United States

Edge hosting and content delivery provider

Site delivery and request logs — global edge

Transactional email provider

Account, application and renewal notices — United States

Printful, Inc.

Merchandise fulfilment and shipping — United States / EU

2.Our commitments

1. 2.1Every subprocessor is engaged under a written contract imposing confidentiality, security and deletion obligations at least as protective as those we owe you.
2. 2.2We publish additions to this list 30 days before the subprocessor begins processing member data.
3. 2.3Organization Members requiring a signed data processing agreement or a security questionnaire response should write to privacy@americancomputersociety.com.
4. 2.4Transfers outside the United States rely on Standard Contractual Clauses with encryption in transit and at rest.