Subprocessor List
Shiftmove engages third-party subprocessors and Shiftmove affiliates to help us provide services to our customers. As a condition of permitting a subprocessor to process personal data, Shiftmove (and its affiliates as applicable) will enter into a written agreement with each subprocessor containing data protection obligations at least as protective as the technical and organizational measures Shiftmove has put into place to protect customer personal data from accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access. Any subprocessor that is only engaged when booking a specific add-on or feature is marked in the “Scope” column.
This document establishes Appendix 3 of the Data Processing Agreement and is part of the contract as per § 6 of the Data Processing Agreement. Any updates to this list will be communicated to our customers based on the requirements defined in our Data Processing Agreement.
Subprocessors for Avrios Fleet Management
For the provision of our fleet management solution Avrios we are using the following subprocessors:
Entity Name
Subprocessing activity
Address
Applicability / Scope
Third Country Data Transmission
Data Protection Transfer Safeguards
Amazon Web Services EMEA SARL, ("AWS Europe")
Hosting, storage, and maintenance of the application database and underlying IT infrastructure.
38 avenue John F. Kennedy, 1855, Luxembourg
Core
No - data is stored exclusively in computing centres wihtin the EU (Frankfurt a.M. Germany)
-
Baruti AG
Manual data validation and quality assurance of information extracted from fleet-related documents (e.g., fuel receipts).
Kirchheim 18, 6037 Root, Switzerland
Core
No
-
CARSYNC GmbH (former RepairFix GmbH)
Processing and transmission of vehicle damage reports and management of repair workflows.
Hafenweg 1648155 Münster, Germany
Optional (Only for "External damage management" package)
No
-
Datadog, Inc.
Real-time monitoring of application health, server performance, and error logging to ensure platform stability and security.
620 8th Ave Fl 45
New York, NY 10018, USA
New York, NY 10018, USA
Core
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or authority requests. Datadog, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Google Ireland Limited
Automated text recognition (OCR) and data extraction from uploaded documents and images; Provision of AI automation model and computing infrastructure.
Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland
Optional (Only for "Fines Management" and "Post Office" packages)
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or authority requests. Google, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
High-Mobility GmbH
Automated collection and processing of vehicle manufacturer data.
Immanuelkirchstraße 8A, 10405 Berlin, Germany
Optional (Only for "Connected Cars" package)
No - data is stored exclusively in computing centres wihtin the EU.
-
Intercom, Inc.
Processing of user contact data to provide customer support via live chat and knowledge base.
55 2nd Street, Suite 400
San Francisco, CA 94105, USA
San Francisco, CA 94105, USA
Core
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or authority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Mixpanel, Inc.
Tracking and analysis of user interactions to optimize platform usability and product features.
Pier 1, Bay 2, The Embarcadero
San Francisco, CA 94111, USA
San Francisco, CA 94111, USA
Core
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or authority requests. Mixpanel, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Planhat A/B
Management of customer success data and distribution of service-related email communications.
Malmskillnadsgatan 13, 111 57 Stockholm, Sweden
Core
No
-
SmartBear Software Inc.
Capturing and analyzing application runtime errors (via Bugsnag) for rapid troubleshooting.
450 Artisan Way Ste 400
Somerville, MA 02145, USA
Somerville, MA 02145, USA
Core
Yes
Smartbear Software Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Twilio Inc.
Transmission of SMS notifications and data routing for internal tool integration (via Segment).
101 Spear St FL 5
San Francisco, CA 94105, USA
San Francisco, CA 94105, USA
Core
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or authority requests. Twilio, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Usercentrics GmbH
Management and storage of user privacy consents and cookie preferences.
Sendlinger Straße 7 80331 München Deutschland
Core
No
-
Zendesk, Inc.
Support request and ticket management for customer support.
985 Market Street, San Francisco, CA 94103, USA (EU HQ: 43-45 Baggot Street Lower, Dublin 2, Ireland)
Core
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or authority requests. Twilio, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Subprocessors for Optimum Automotive
We use the following subprocessors for the provision of Optimum Automotive:
Entity Name
Subprocessing activity
Address
Applicability / Scope
Third Country Data Transmission
Data Protection Transfer Safeguards
Mapping Control Morocco
Maintenance of products, customer support of the SaaS platform and mobile applications.
Morocco
Core
Yes
Standard Contractual Clauses (SCCs)
Shiftmove GmbH
Provision of Avrios Fleet Management SaaS, technical support.
Germany
Core
No
N/A
Microsoft Azure
Hosting of personal data.
EEA
Core
No
N/A
SendinBlue
Email routing service.
EEA
Core
No
N/A
Sendethic
Email routing service.
EEA
Core
No
N/A
StormShield
Provision of an incident detection service for security.
EEA
Core
No
N/A
Renault SAS
Communication of data collected via Renault boxes (Data Subjects are neither identified nor identifiable by Renault SAS).
France
Optional
No
N/A
Subprocessors for Vimcar Fleet Geo and Logbook
We use the following subprocessors for the provision of Vimcar Fleet Geo and the Vimcar (Fleet)-Logbook:
Entity Name
Subprocessing activity
Address
Applicability / Scope
Third Country Data Transmission
Data Protection Transfer Safeguards
Amazon Web Services EMEA SARL, ("AWS Europe")
Provision of core cloud infrastructure including encrypted storage of application databases, backups, and file hosting for customer data.
38 avenue John F. Kennedy, 1855, Luxembourg
Core
No - data is stored exclusively in computing centres wihtin the EU (Frankfurt a.M. Germany)
-
Datadog, Inc.
Real-time ingestion and analysis of system logs and performance metrics to identify technical issues and ensure service availability.
620 8th Ave Fl 45
New York, NY 10018, USA
New York, NY 10018, USA
Core
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Datadog, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Google Ireland Limited
Provision of geocoding services and interactive maps for the visualization of vehicle locations and trip routes.
Gordon House, Barrow Street, Dublin 4, Ireland
Core
No
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or authority requests. Google, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Intercom, Inc.
Provision of a communication platform for direct customer support, including chat history management and help center access.ty.
55 2nd Street, Suite 400
San Francisco, CA 94105, USA
San Francisco, CA 94105, USA
Core
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or authority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
LapID Service GmbH (optional when using driver licence checks)
Coordination and technical processing of automated or manual driver's license verification tasks.
Untere Industriestraße 20, 57250 Netphen, Germany
Fleet Mangement Driver Licence Package
No
-
Munic SA
(previous: MDI - Mobile Devices Ingenierie)
(previous: MDI - Mobile Devices Ingenierie)
Technical processing and forwarding of raw vehicle telemetry from hardware devices to the Vimcar platform servers.
100 Avenue de Stalingrad, 94800 Villejuif, France
Core
No - data is stored exclusively in computing centres wihtin the EU.
-
SmartBear Software Inc.
Capturing and analyzing application runtime errors (via Bugsnag) for rapid troubleshooting.
450 Artisan Way Ste 400
Somerville, MA 02145, USA
Somerville, MA 02145, USA
Core
Yes
Smartbear Software Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Twilio Inc.
Collection and management of user consent preferences regarding cookies and tracking technologies in compliance with GDPR.
101 Spear St FL 5
San Francisco, CA 94105, USA
San Francisco, CA 94105, USA
Core
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Twilio, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Usercentrics GmbH.
Consent mangement provider
Sendlinger Straße 7 80331 München Deutschland
Core
No
-
Zendesk, Inc.
Support request and ticket management for customer support.
985 Market Street, San Francisco, CA 94103, USA (EU HQ: 43-45 Baggot Street Lower, Dublin 2, Ireland)
Core
No - data is stored exclusively in computing centres wihtin the EU.
Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Zendesk, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data.
Subsidiaries
For the provision of our services and the support of our customers we are also engaging the following subsidiaries as subprocessors:
Entity Name
Address
Processing Activity
Third Country Data Transmission
Data Protection Transfer Safeguards
Comments
Shiftmove GmbH
Warschauer Straße 57, 10243 Berlin, Germany
Customer Support for all products; Product development and improvement;
No
-
-
Vimcar GmbH
Warschauer Straße 57, 10243 Berlin, Germany
Provision of Vimcar SaaS-Solutions Logbook and Fleet Geo; Customer Support; Product development and improvement;
No
-
-
Avrios International AG
Rieterstr. 6, 8002 Zürich, Switzerland
Provision of SaaS-Solution Avrios; Customer Support; Product development and improvement;
Yes
Adequacy decision of the European Commission for Switzerland
-
Avrios Italy S.R.L.
Via Bernardino Telesio 2, 20145 Milano (MI), Italy
Customer Support for all products; Product development and improvement;
No
-
-
Avrios Poland Sp. z o.o.
Legnicka 16, 53-673 Wrocław, Poland
Customer Support for all products; Product development and improvement;
No
-
-
Shiftmove France
190 Rue Marcelle Isoard, 13090 Aix-en-Provence, France
Customer Support for all products; Product development and improvement;
No
-
-
Océan SAS
860 Rue René Descartes, 13290 Aix-en-Provence, France
Provision of SaaS-Solution OCEAN; Customer Support; Product development and improvement;
No
-
-
Optimum Automotive Group SAS
Oxydium Concept Bâtiment A, 190 Rue Marcelle Isoard, 13090 Aix-en-Provence, France
Provision of SaaS-Solution Optimum Automotive; Customer Support; Product development and improvement;
No
-
-
Updates
Date of Change
Change
Notes
15.05.2026
Updated design and format of subprocessor page without any alteration of the provided contetn
none
20.04.2026
Updated Google processing activity for Avrios to prepare rollout of AI document readout functionality
Avrios
20.01.2026
Updated Subsidiaries to include OCEAN as new acquisition
Ocean
30.09.2025
Updated Legal Entity for CARSYNCH (formerly Repairfix) as result of a merger
Avrios
Subprocessor List
Shiftmove
| Entity Name | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards | Comment |
|---|---|---|---|---|---|
| Avrios International AG | Customer Support, Product Development | Weststrasse 50, 8003 Zürich, Switzerland | Yes | Adequacy decision of the European Commission pursuant to Art. 45 (1) GDPR. | Group Company |
| Vimcar GmbH | Provision of Vimcar Fleet Logbook and Fleet Geo SaaS-Products, Customer Support | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company |
Vimcar
| Entity Name | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL, ("AWS Europe") | Cloud service provider | 38 avenue John F. Kennedy, 1855, Luxembourg | No - data is stored exclusively in computing centres wihtin the EU (Frankfurt a.M. Germany) | - |
| Datadog, Inc. | Application health and runtime monitoring | 620 8th Ave Fl 45 New York, NY 10018, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Datadog, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| LapID Service GmbH (optional when using driver licence checks) | Application error monitoring through Bugsnag | Untere Industriestraße 20, 57250 Netphen, Germany | No | |
| Munic SA (previous: MDI - Mobile Devices Ingenierie) | Recording, temporary storage and forwarding of anonymised data from the logbook hardware. | 100 Avenue de Stalingrad, 94800 Villejuif, France | No | - |
| FusionAuth | Registration and log-in provider (including Multi-Factor-Authentification and Single-Sign-On) | 11080 Circle Point Rd #405, Westminster, CO 80020, USA | Yes | |
| Google Ireland Limited | Provision of map API | Gordon House, Barrow Street, Dublin 4, Ireland | No | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Google, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| Intercom, Inc. | Provosion of the support live chat and support knowledge base | 55 2nd Street, Suite 400 San Francisco, CA 94105, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| Mixpanel, Inc. | Logging and usage analytics | Pier 1, Bay 2, The Embarcadero San Francisco, CA 94111, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| Munic SA (previous: MDI - Mobile Devices Ingenierie) | Recording, temporary storage and forwarding of anonymised data from the logbook hardware. | 100 Avenue de Stalingrad, 94800 Villejuif, France | No | - |
| Twilio Inc. | product analytics and tool integration (via Segment) | 101 Spear St FL 5 San Francisco, CA 94105, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Twilio, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. |
| Usercentrics GmbH | Consent mangement provider | Sendlinger Straße 7 80331 München Deutschland | No | - |
Affiliated companies
| Affiliates | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards | Comment |
|---|---|---|---|---|---|
| Avrios Germany GmbH | Customer Support, Product Development | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company | |
| Avrios Poland sp. z o.o | Customer Support, Product Development | Fabryczna 6, PL-53-609 Wrocław, Poland | No | Group Company | |
| Avrios International AG | Provision of the Avrios SaaS-Product | Weststrasse 50, 8003 Zürich, Switzerland | Yes | Adequacy decision of the European Commission pursuant to Art. 45 (1) GDPR. | Group Company |
| Shiftmove GmbH | Customer Support, Contracting Entity | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company |
Avrios
| Entity Name | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards | Comment |
|---|---|---|---|---|---|
| Amazon Web Services EMEA SARL, ("AWS Europe") | Cloud service provider | 38 avenue John F. Kennedy, 1855, Luxembourg | No - data is stored exclusively in computing centres wihtin the EU (Frankfurt a.M. Germany) | - | |
| Baruti AG | Quality assurance support | Kirchheim 18, 6037 Root, Switzerland | No | - | |
| Datadog, Inc. | Application health and runtime monitoring | 620 8th Ave Fl 45 New York, NY 10018, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Datadog, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Google Ireland Limited | Provision of Document Readout Automations | Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Google, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Intercom, Inc. | Provosion of the support live chat and support knowledge base | 55 2nd Street, Suite 400 San Francisco, CA 94105, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Mixpanel, Inc. | Logging and usage analytics | Pier 1, Bay 2, The Embarcadero San Francisco, CA 94111, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Intercom, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Planhat A/B | Customer relationship management system and e-mail campaigning | Malmskillnadsgatan 13, 111 57 Stockholm, Sweden | No | - | |
| RepairFix GmbH | Damage Management Integration | Hafenweg 1648155 Münster, Germany | No | - | Optional. Only applicable when using the Damage Management functionality. |
| SmartBear Software Inc. | Application error monitoring through Bugsnag | 450 Artisan Way Ste 400 Somerville, MA 02145, USA | Yes | Smartbear Software Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Twilio Inc. | product analytics and tool integration (via Segment) | 101 Spear St FL 5 San Francisco, CA 94105, USA | No - data is stored exclusively in computing centres wihtin the EU. | Although no transfer of personal data to the US is intendet, it is theoretically possible in case of support requests or auhtority requests. Twilio, Inc. is certified under the EU-US-Data Privacy Framework. Therefore the adequacy decision by the EU commission applies to any transfer of personal data. | |
| Usercentrics GmbH | Consent mangement provider | Sendlinger Straße 7 80331 München Deutschland | No | - |
Affiliated companies
| Affiliates | Subprocessing activity | Address | Third Country Transmission | Data Protection Transfer Safeguards | Comment |
|---|---|---|---|---|---|
| Avrios Germany GmbH | Customer Support, Product Development | Warschauer Str. 57, 10243 Berlin, Germany | No | Fully owned subsidiary | |
| Avrios Poland sp. z o.o | Customer Support, Product Development | Fabryczna 6, PL-53-609 Wrocław, Poland | No | Fully owned subsidiary | |
| Vimcar GmbH | Provision of Vimcar Fleet Logbook and Fleet Geo SaaS-Products, Customer Support | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company | |
| Shiftmove GmbH | Customer Support, Contracting Entity | Warschauer Str. 57, 10243 Berlin, Germany | No | Group Company |