§ 01 · Overview
Grizzly Systems engages third-party Sub-processors to provide the GrizCam Hardware, the GrizCam Desktop, GrizCam Portal, and GrizCam Mobile software (collectively, the “Services”). Each Sub-processor is bound by a written agreement that imposes data-protection obligations no less protective than those set out in our Data Processing Addendum (DPA). We remain liable to you for the acts and omissions of our Sub-processors as if they were our own.
Per Section 4.2 of the DPA, we provide at least thirty (30) days’ prior notice before adding any new Sub-processor. Customers subscribed to update notifications receive notice by email; the list below is updated in parallel.
§ 02 · Categories of Sub-processors
Grizzly Systems engages Sub-processors in the categories below as of the effective date of this disclosure. Specific named entities within each category, including legal entity name, processing location, and applicable certifications, are listed in §03 and updated as engagements change.
| Category | Purpose | Processing location |
|---|---|---|
| Cloud Infrastructure | Hosting of Services, storage of Customer Data, network and compute. | United States |
| Content Delivery | Edge caching and acceleration of static assets and recorded media. | Global |
| Email & Communications | Transactional email, support communications, account notifications. | United States |
| Customer Support Tools | Ticketing, knowledge base, and customer-support chat. | United States |
| Analytics & Monitoring | Product analytics, error monitoring, performance metrics. | United States |
| Payment Processing | Subscription billing and payment-card processing. | United States |
| AI Training Infrastructure | Compute, model storage, and training-pipeline tooling for AI Models. | United States |
| Identity & Authentication | Single sign-on, multi-factor authentication, identity verification. | United States |
§ 03 · Named Sub-processors
Specific named Sub-processors corresponding to each category in §02 are being finalized as part of our production rollout. The list below will be updated as commercial agreements are executed, and Customers will be notified per §01.
List forthcoming. Until then, Customers seeking the current roster for diligence purposes (e.g. DPIA, vendor review) may request it from privacy@grizzlysystems.io.
§ 04 · Objections
Customers may object to the engagement of a new Sub-processor on reasonable grounds related to data protection by providing written notice within fifteen (15) days of receiving notice. The parties will work together in good faith to address the objection. If the parties cannot reach a resolution, the Customer may, as its sole remedy, terminate the affected portion of the Services on written notice, and Grizzly Systems will refund any prepaid fees for the terminated portion covering the period after termination. See DPA §4.2 for the full procedure.
§ 05 · Changelog
Material updates to this Sub-processor list are recorded below.
- v1.0 — Initial publication. Categories from DPA Exhibit C; specific named entities pending finalization of commercial agreements.