Users' personal data may be processed using appropriate service providers, carefully selected by Promptly in accordance with the GDPR, to adopt sufficient guarantees for the implementation of appropriate technical and organizational measures for the processing of data that meets the requirements of GDPR and ensure the protection of the rights of data subjects. Service providers will only treat personal data for the purposes defined by Promptly and in compliance with the instructions issued by Promptly, ensuring and observing the standards set forth in the GDPR and other applicable data protection laws.

The Promptly platform is hosted by Amazon Web Services (AWS) services, meeting Amazon's guaranteed security standards (https://aws.amazon.com/en/security/) and compliance (https://aws.amazon.com/compliance/programs/).

The identification of entities subcontracted by Promptly is made in the access to the Platform.