Sub processors and third parties

This information has been transferred and updated We are in the process of transferring where we publish our sub processor list from our ST4S Supplier Guide onto a web page for easier maintenance. This web page is regarded as the latest information.

The ST4S Team uses the following third-party services to deliver the ST4S initiative which process personal information. We update this page 30 days in advance of changes coming into effect. You can subscribe to updates on this page and our privacy policy using the form below.

Security and privacy

We only use services which meet a high standard in relation to cybersecurity and privacy. The standards we require include a minimum of SOC2 and/or ISO27001 compliance. For developing partners we require a master services agreement which contains confidentiality clauses and other measures to ensure the security and protection of data including restricting any cross border transfers of information.

We host all information in Australia where possible. Where the service providers we work with cannot host in Australia, we preference legal jurisdictions with strong privacy laws such as the European Union.

List of processors and third parties

Name	Category	Link	Purpose	Personal Data Types	Location
Alchemer	Forms	https://www.alchemer.com	Facilitates online questionnaires for the Readiness Check, Full Assessment, Evidence File Uploads, and other data collection activities such as the feedback and consultation form	Contact information (e.g. name, email, phone number), IP address, device information.	Germany
Microsoft Office 365 (O365)	Workplace productivity	https://www.microsoft.com/en‑au/microsoft‑365	Stores contact details of suppliers and stakeholders engaging with the ST4S initiative; stores assessment files and supporting documentation.	Contact information (e.g. name, email, phone number).	Australia
Zendesk	Customer support	https://www.zendesk.com/	Customer support tool and portal. Maintains contact information; enables communication with suppliers and stakeholders via email, chat or other means; hosts knowledge‑base articles.	Contact information (e.g. name, email, phone number).	Australia
Amazon Web Services (AWS)	Infrastructure	https://aws.amazon.com/	Hosts the public website and ST4S Product Badge Portal. Facilitates data integrations such as processing data and transferring information between our services and sub‑processors; hosts our email for st4s.edu.au domains.	Contact information (e.g. name, email, phone number), IP address, device information.	Australia
Google Analytics	Web Analytics	https://analytics.google.com/	Facilitates analytics for the public website and Product Badge Portal; provides engagement metrics for knowledge‑base articles.	IP address, device information (such as browser type).	Australia
Directus	Content management system (CMS)	https://directus.io	Our CMS which handles information for the ST4S assessment, contact information of companies and accounts.	Contact information, IP address, device information	Australia
Kinde	Authentication	https://kinde.com/	Handles authentication for the ST4S catalogue.	Contact information, IP address, device information	Australia
Rocket Labs	Support and Development	https://www.rocketlab.com.au/privacy-policy	Handles development. May provide support and have limited access to end user information as part of providing platform support.	Contact information, IP address, device information	Australia

Notifications and updates

For updates to your sub processor list and privacy policies, please register using your email address. Subscribing to these updates is separate to any ST4S mailing list updates (e.g. promotional, marketing).