GDPR Subprocessors

Our External Data Processors & Their GDPR Policies

We use a number of key software providers to deliver our services to you. They are listed below, along with a brief overview of the services they provide for us or for you. We may not use all of the providers below for the services we provide you. If you would like a full list of the providers who we’re using to service your company/person, please e-mail privacy@1-fix.com and we will provide this to you.

All of our external partners are vetted and monitored for their GDPR and general security commitments.

ITGlue – Externally hosted service used for storing details of our client’s networks and IT assets. Not used for password storage. Data hosted in EU
https://itglue.com/blog/gdpr-compliance-protects-privacy/

ConnectWise – Externally hosted service used for our professional services automation, holding customer details, contact information, IT asset information and trouble ticket information. EU hosted.
https://www.connectwise.com/gdpr

Heimdal Security – Managed security service and patching provider for ensuring your computers are secure and as low-risk as possible from a vulnerability perspective.
https://heimdalsecurity.com/license-agreement-and-privacy-policy

Microsoft Office 365 – Externally hosted service used to provide 1-Fix’s own e-mail service. Data hosted in EU, but may be transferred by Microsoft to US servers in the event of an outage under terms of Standard Contractual Clauses (EU compliant). Privacy Shield in place.
General Data Protection Regulation - Microsoft GDPR | Microsoft Learn

Xero – Externally hosted service for accountancy holding accounts information and contact information for client account contacts.
https://www.xero.com/uk/campaigns/xero-and-gdpr/

Access PaySuite – Externally hosted service for Direct Debit processing. They hold client bank details for the purpose of collecting invoices generated by 1-Fix.
https://www.accesspaysuite.com/policies/

Opentext – Provide CloudAlly backup solution, and also the Advanced Email Threat Protection product we secure your company e-mail with. UK hosted.
https://www.opentext.com/en-gb/about/opentext-privacy-center

Kaseya – Provide Datto service, which is external cloud hosted storage for our local server back-ups. The data stored with Datto is encrypted at rest and in transmission. UK & EU hosted.
Kaseya Privacy Statement - Kaseya

N-Able - Provide Cove, a cloud hosted backup service used for server back-ups. The data stored with N-Able is encrypted at rest and in transmission.
GDPR Compliance (n-able.com)

Keeper - Provide Keeper password management, a zero-knowledge cloud hosted password vault.
Keeper GDPR Compliance | Zero-Knowledge Platform | Keeper Security UK