Sub-Processors

Challenger Performance Optimization Inc. and its Affiliates (collectively, “Challenger” unless otherwise specified)[1] use certain Sub-Processors (commonly referred to as subcontractors in certain jurisdictions) to assist in its services. Challenger undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed Sub-Processors and contractually requires Sub-Processors to comply with all applicable data protection laws and regulations.

Sign up for updates to our Sub-Processor list on the form below.

Sub-Processors

Description / Purpose

Data or Information Stored

Data Storage Location


Sub-Processor:

Asana, Inc.

Asana’s Privacy Policy can be found here

Information as to Asana’s sub-processors can be viewed here

(Note that not all listed are applicable to Challenger’s activity at Asana)

Description / Purpose

Challenger uses Asana for project planning and management.

Data or Information Stored

First name, last name, title, and business email. In some cases, business unit, manager name, and geographic location may be stored.

Data Storage Location

United States


Sub-Processor:

ConnectAndSell Inc.

ConnectAndSell’s Privacy Notice can be found here

Description / Purpose

Challenger uses ConnectAndSell for smart dialing services to connect with customers and prospects.

Data or Information Stored

Data exported from Challenger’s instance on Salesforce.com including account information, sales history, customer contracts and personal information including first name, last name, email address, phone number for users who are the primary account or opportunity contact(s).

Data Storage Location

United States


Sub-Processor:

Credly Inc.

Credly’s Privacy Policy can be found here

Information as to Credly’s sub-processors can be viewed here

(Note that not all listed are applicable to Challenger’s activity at Credly)

Description / Purpose

Challenger uses Credly to issue digital badges to clients upon workshop and/or e-learning completion. Clients are then able to accept their digital badge and share it with their networks through social media, email, sms, etc.

Data or Information Stored

First name, last name, email address.

Data Storage Location

United States


Sub-Processor:

DealHub Ltd.

Dealhub’s Privacy Policy can be found here

Description / Purpose

Challenger uses DealHub’s configure, price, quote platform to generate and manage contracts with clients and prospects.

Data or Information Stored

First name, last name, title, business email.  A client’s billing information such as contact phone number and billing address is also collected and stored.

Data Storage Location

United States


Sub-Processor:

Gong.io, Inc.

Gong’s Privacy Policy can be found here.

Information as to Gong’s sub-processors can be viewed here.

(Note that not all listed are applicable to Challenger’s activity at Gong.)

Description / Purpose

Challenger uses Gong to manage relationships with clients and prospects.

Data or Information Stored

Contact and business details such as name, email, phone number, position, IP address, workplace and related business insights.

Data Storage Location

United States


Sub-Processor:

HubSpot

Hubspot’s Security Policy can be found here

Information as to Hubspot’s sub-processors can be viewed here

(Note that not all listed are applicable to Challenger’s activity at HubSpot)

Description / Purpose

Challenger uses HubSpot for marketing automation and analytics, monitoring website activity and as a communications tool.

Data or Information Stored

Opt-in sales data that includes Personal information including first name, last name, email address, phone number for users who are the primary account or opportunity contact(s) and associated personalized and relevant contact communication.

Data Storage Location

United States


Sub-Processor:

Medallia

Medallia’s Privacy Policy can be found here. 

Information as to Medallia’s sub-processors can be viewed here.  

(Note that not all listed are applicable to Challenger’s activity at Medallia) 

Description / Purpose

Challenger uses Medallia to distribute rep and deal feedback surveys on behalf of our customers. 

Data or Information Stored

First name, last name, username, business email, reporting relationships, and survey responses.  

Data Storage Location

United States


Sub-Processor:

Microsoft Azure

Microsoft’s Security Policy can be found here

Information as to Microsoft’s sub-processors can be viewed here.

(Note that not all listed are applicable to Challenger’s activity at Microsoft)

Description / Purpose

Two components of Challenger’s Activation portfolio, Insight Designer and Sales Planner, are serviced by Challenger employees and hosted on Microsoft Azure.

Data or Information Stored

First name, last name, business email, client product/solution details and commercial messages created.

Data Storage Location

Data stored in the United States


Sub-Processor:

Microsoft Office 365 hosted by Microsoft

Microsoft’s Security Policy can be found here

Information as to Microsoft’s sub-processors can be viewed here.

(Note that not all listed are applicable to Challenger’s activity at Microsoft)

Description / Purpose

Challenger communicates by email from time to time using client provided email addresses as we provide client services. In addition, certain client data is stored in other  Office 365 Software (OneDrive, SharePoint, Exchange, Teams).

Data or Information Stored

Client emails and other data provided to Challenger by clients with respect to provision of the services or with client permission, for research purposes.

Data Storage Location

United States


Sub-Processor:

Qualtrics, LLC

Qualtrics’s Security Statement can be found here

Qualtrics’s Privacy Statement can be found here

Information as to Qualtrics’s sub-processors can be viewed here

(Note that not all listed are applicable to Challenger’s activity at Qualtrics)

Description / Purpose

Challenger uses Qualtrics to provide backend software for certain surveys deployed both within and outside of the Challenger Hub.

Data or Information Stored

First name, last name, title, business email, and survey responses. In some cases, geographic location and IP addresses may also be stored.

Data Storage Location

Data stored in the United States


Sub-Processor:

Salesforce.com

Salesforce’s Privacy Policy can be found here.

Information as to Salesforce’s sub-processors can be viewed here.

(Note that not all listed are applicable to Challenger’s activity at Salesforce)

Description / Purpose

Challenger uses Salesforce.com to manage relationship with clients and prospects

Data or Information Stored

Account information, sales history, customer contracts and personal information including first name, last name, email address, phone number for users who are the primary account or opportunity contact(s).

Data Storage Location

United States


Sub-Processor:

SHL US Inc.

SHL’s Security and Compliance Notice can be found here

Information as to SHL’s sub-processors can be viewed here

(Note that not all listed are applicable to Challenger’s activity at SHL)

Description / Purpose

SHL provides the Challenger Assessment via its Talent Central Platform.  A validated self-assessment pinpoints the candidates and/or existing employees that are statistically more likely to succeed at Challenger behaviors. Various interview guides provide Sales Managers with decision support to make the best possible hire while an Onboarding Portal accelerates new hire time-to-productivity.

Data or Information Stored

First name, last name, title, business email, username, customer service information and assessment responses. In some cases, geographic location may also be stored.

Data Storage Location

The Talent Central Platform maintains four unique domains (.com, .eu, .cn, .au), which route to four distinct local data centers in the US, EU, China, and Australia.  For example, clients with operations in Europe are placed on TalentCentral.eu


Sub-Processor:

Showpad, Inc.

Showpad’s Privacy Policy can be found here

Information as to Showpad’s sub-processors can be viewed here

(Note that not all listed are applicable to Challenger’s activity at Showpad)

Description / Purpose

Challenger uses Showpad to distribute content to customers and prospects

Data or Information Stored

First name, last name, business email

Data Storage Location

Frankfurt, Germany


Sub-Processor:

Thought Industries, Inc.

Thought Industries’ Privacy Policy  can be found here

Description / Purpose

Challenger uses Thought Industries to host its Challenger Hub. The Challenger Hub is the primary eLearning system used to deploy the majority of Challenger’s online training for various product sets.

Data or Information Stored

First name, last name, title, business email, username, customer service information, IP address, and certain eLearning metrics. In some cases, geographic location may also be stored.

Data Storage Location

Data stored in the United States


Sub-Processor:

WalkMe, Inc.

WalkMe’s Privacy Policy can be found here

Description / Purpose

Challenger uses WalkMe’s digital adoption platform to help users navigate the Challenger Hub, increase adoption of the platform, and provide a seamless user experience.

Data or Information Stored

IP address, business email, user role type, and certain eLearning metrics.

Data Storage Location

United States


Sub-Processor:

Workshop Facilitators

Description / Purpose

Some of Challenger’s workshop facilitators are not full-time employees.

Data or Information Stored

Facilitators may have access to attendee information for a particular workshop they facilitate.  All facilitators are under strict contracts with Challenger that are reviewed and renewed on an annual basis.

Data Storage Location

N/A


Sub-Processor:

Zoom Video Communications, Inc.

Zoom’s Privacy Policy can be found here

Description / Purpose

Certain of Challenger’s training sessions may be delivered using Zoom.

Data or Information Stored

Challenger uses all privacy tools available in Zoom.  The application itself collects the following information related to our sessions:
User Profile: First Name, Last Name, Phone (optional), Email, Password (if SSO is not used), Profile Picture (optional), Department (optional)
Meeting Metadata: Topic, Description (optional), participant IP addresses, device/hardware information
Communication Information: Call In Number, Call Out Number, Country Name, IP address, Start and End time, Host Name, Host Email, MAC Address of device used

Data Storage Location

United States, E.U., and Australia

1 Challenger Affiliates are the entities under common control with Challenger Performance Optimization Inc.: Challenger Performance Optimization UK Limited, Challenger Performance Optimization Singapore Pte Ltd, Challenger Germany GmbH and Challenger Performance Optimization Australia Pty Ltd.