Subprocessors

1. About this page

This page lists the third-party service providers (each, a "subprocessor") that Brave River Inc. d/b/a CommerceShip engages to process personal data on behalf of CommerceShip and its customers in connection with the Services. CommerceShip enters into written agreements with each subprocessor that include data-protection commitments substantially similar to those CommerceShip provides to its customers, including, where applicable, the European Commission's Standard Contractual Clauses and the United Kingdom International Data Transfer Addendum for cross-border transfers.

Subprocessors are grouped into two sections: Section 2 lists service-provider subprocessors that are always engaged in the operation of the Services; Section 3 lists integration subprocessors that are engaged when a Customer activates an integration with a third-party system (e.g., a carrier, e-commerce store, marketplace, warehouse management system, or order management system). In both cases, the listed entities are subprocessors of CommerceShip; the distinction is operational (always-on vs. activated by Customer) rather than legal.

Customers entitled to advance notice of subprocessor changes under their Data Processing Agreement may subscribe to receive notifications by emailing privacy@commerceship.com. Where required, CommerceShip will provide notice of new subprocessors in accordance with the timing set out in the applicable Data Processing Agreement.

2. Service-provider subprocessors

The following subprocessors support the operation, security, and delivery of the Services and are engaged regardless of which integrations a Customer activates. Categories of personal data each subprocessor may process are described at a high level; specific data categories depend on Customer's use of the Services.

2.1 Infrastructure & Security

2.2 Data, Analytics & Product Insights

The following subprocessors are used on the CommerceShip marketing site (commerceship.com) and related web properties. They do not process data within the application (app.commerceship.com).

2.3 AI / Generative Models

2.4 Communications

2.5 Marketing & Advertising

The following subprocessors are used on the CommerceShip marketing site (commerceship.com). They do not process data within the application.

2.6 Payments

2.7 Mapping & Address Validation

2.8 Data Warehousing

2.9 Privacy & Consent Management

3. Integration subprocessors

The following subprocessors are engaged when a Customer activates an integration with a third-party system. The Customer authorizes data flow to or from each such system by enabling the integration; CommerceShip transmits personal data necessary to operate the integration. Each integration partner processes that data subject to its own privacy practices. Sub-sections below are organized by category; the Customer's use determines which integrations apply.

3.1 Carriers

3.2 Stores

3.3 Marketplaces

(Specific integrations within this category will be added as the Services expand. Customers with executed Data Processing Agreements will be notified of additions as set out in those agreements.)

3.4 Warehouse Management Systems (WMS)

3.5 Order Management Systems (OMS)

(Specific integrations within this category will be added as the Services expand. Customers with executed Data Processing Agreements will be notified of additions as set out in those agreements.)

3.6 Third-Party Logistics (3PL)

(Specific integrations within this category will be added as the Services expand. Customers with executed Data Processing Agreements will be notified of additions as set out in those agreements.)

3.7 Enterprise Resource Planning (ERP)

(Specific integrations within this category will be added as the Services expand. Customers with executed Data Processing Agreements will be notified of additions as set out in those agreements.)

3.8 Transportation Management Systems (TMS)

3.9 Operations & IoT

3.10 Productivity

(Specific integrations within this category will be added as the Services expand. Customers with executed Data Processing Agreements will be notified of additions as set out in those agreements.)

3.11 Communications & Notifications

CommerceShip adds and removes integration subprocessors from time to time as the Services expand and as Customers request new integrations. The lists above will be updated to reflect each addition or removal.

4. Cross-border transfer mechanisms

CommerceShip's primary infrastructure and operations are located in the United States. Where a subprocessor listed above operates outside the United States, or where Customer is established in a jurisdiction requiring a transfer mechanism for personal data processed in the United States, the parties rely on the European Commission's Standard Contractual Clauses (and the United Kingdom International Data Transfer Addendum, where applicable), together with any supplementary measures reasonably required, as set out in the Data Processing Agreement available at www.commerceship.com/legal/dpa.

5. Subscribe to changes

To subscribe to notifications of additions or material changes to this subprocessor list, please email privacy@commerceship.com with the subject line "Subscribe to subprocessor updates" and the email address on which you would like to receive notice. Customers with executed Data Processing Agreements receive notice as set out in those agreements.

6. Contact

Questions about subprocessors, transfer mechanisms, or this page may be directed to privacy@commerceship.com or to Brave River Inc. d/b/a CommerceShip, c/o Privacy Team, 1314 22nd Ave #22024, San Francisco, CA 94122, United States.