This Subprocessor List (“List”) identifies the subprocessors that Applied Systems, Inc. and its affiliates (collectively “Applied”) has engaged to process personal data for the Applied products, services, and other purposes as listed below. In addition to the below subprocessors, Applied’s affiliates support and maintain Applied products and services. In selecting its subprocessors, Applied uses commercially reasonable processes to evaluate the security and privacy practices of potential subprocessors. Once selected, Applied requires its subprocessors to satisfy materially equivalent obligations to those Applied has agreed to in its contracts with our customers and as otherwise required by applicable laws, including but not limited to the obligation to keep information secure and confidential, process it in accordance with instructions provided, and notify Applied in the event of a security breach. Applied may change, remove, or add subprocessors to the List as our business evolves. Applied will post updates to the List here. Please check back frequently for updates.
Entity Name |
Nature & Purpose of Processing |
Location of Subprocessing Activities |
Applicable Product or Service |
|
Hosting Subprocessors |
|||
|
Amazon Web Services, Inc. |
Cloud hosting |
United States, Canada |
Indio, Applied Benefits Designer, Ask Kodiak, Tarmika |
|
Google LLC |
Cloud hosting |
United States, Netherlands |
Applied Epic |
|
Microsoft Corporation |
Cloud hosting (Azure) |
(1) Canada (2) Republic of Ireland (3) Netherlands |
(1) Policy Works (2) WealthTrack (3) RiskHandler |
|
Other Subprocessing Services |
|||
|
Accadian |
Driver license number verification |
Republic of Ireland |
Applied Relay, Applied Connect |
|
Adyen |
Payment processing services |
United States |
Applied Pay; Applied general corporate use |
|
Anthropic |
AI model services for content generation, task automation, and agentic workflows |
Global |
General corporate use; Applied products with AI features enabled |
|
Applied Client Network |
Membership services within industry group for customers |
United States |
Applied general use |
|
Atlassian Corporation |
Customer support |
United States |
Applied general use |
|
AlphaAI Technologies Inc. |
API search services |
United States |
Epic Search, Applied Book Builder |
|
Cloudflare, Inc. |
Internet Security Services (web application firewall, DDoS attack prevention and related security services) |
Globally at the data center closest to end user |
Applied general corporate use relating to data centers and internet gateways for products and services |
|
Crowdstrike, Inc. |
Security monitoring, endpoint protection, and threat detection services |
United States, Germany |
Applied general corporate use relating to information security |
|
Datadog, Inc. |
Security log and event aggregation and tracking for cloud infrastructure |
United States |
Applied general corporate use |
|
DocuSign |
eSignature functionality |
United States |
Applied general corporate use |
|
ElevenLabs Inc. |
Audio submission functionality |
United States |
Cytora |
|
Genesys |
Phone and recording services for sales and support |
United States, India |
Applied general corporate use (US, Canada) |
|
Gong.io |
Video and recording services for sales |
United States |
Applied general corporate use (US, CAN) |
|
Google LLC |
(1) AI model services for content generation, task automation, and agentic workflows (2) Office productivity services |
(1) United States, Canada (2) United States |
(1) Applied products with AI features enabled (2) General corporate use |
|
Auth0 (formerly Okta) |
Authentication and single-sign on provider |
United States |
Applied products with SSO enabled |
|
OpenAI, LLC |
AI model services for content generation, task automation, and agentic workflows |
United States |
EZLynx AI features; Applied Book Builder |
|
LexisNexis Risk Solutions |
Bank detail validation |
United Kingdom |
Applied Relay, Applied Connect |
|
Made By Sauce Ltd. |
Website design services |
United Kingdom and Republic of Ireland |
Applied Epic (UK); Applied Connect (IRE) |
|
Mailgun Technologies, Inc. |
Communication services and email capabilities |
United States |
Applied Marketing Automation (US, Canada) |
|
Marketo |
Customer, sales lead, and marketing services and management |
United States |
Applied general corporate use |
|
Microsoft Corporation |
Office productivity services |
United States, United Kingdom |
Applied general corporate use |
|
ModSquad |
After-hours support for insureds |
United States |
Applied CSR24 (US) |
|
NetSuite |
Billing and accounting services |
United States |
Applied general corporate use |
|
Notion Labs, Inc. |
Video recording services |
United States, Republic of Ireland |
Applied general corporate use |
|
Pendo.io, Inc. |
In-app training functionality |
United States |
Applied Epic (US) |
|
Perplexity AI, Inc. |
Web search functionality |
United States |
Applied general corporate use |
|
Salesforce, Inc. |
Customer relationship management |
United States |
Applied general corporate use |
|
Simplified.ID |
Sanctions Screening |
United Kingdom |
Applied Relay, Applied Connect |
|
Slack |
Collaboration and messaging services |
United States |
Applied general corporate use |
|
Twilio, Inc. |
Communication services and texting capabilities |
United States |
Applied Integrated Texting; Applied Epic |
|
Zoom, Inc. |
Customer support and general telecommunications services |
United States |
Applied general corporate use |
Page last updated 9 October 2026