Legal Stuff

Sub-Processors

SweepstakesPros - Sub-processors & Third-Party Providers

Last Modified: August 24, 2025

Change Log: 2025-08-23 - Alphabetized tables; split Veremark/Checkr into separate rows in Section A; Authorize.Net in Section B; USPS/UPS/FedEx and Greatland clarifications; notice 15 days; per-client sub-processor note retained.

Scope & Roles

When SweepstakesPros processes Customer Personal Data on a client's instructions (processor role), we may engage the sub-processors listed in Section A. When we provide our own services or use vendors for internal operations (controller role), we rely on the third parties in Section A, Section B (service providers), and Section C (independent controllers/partners). References to applicable data protection laws in this page are to be read consistently with our Privacy Policy and client data processing agreement.

Note: This list does not include any sub-processors that may be agreed on a per client basis for specific projects. Such engagements will be governed by the ordering document and our DPA, and we will provide notice consistent with those terms.

Sub-processor change notifications (Art. 28(2)). We will provide at least 15 days prior notice before adding or replacing any sub-processor that will process Customer Personal Data. To receive notices or to object (where your DPA provides that right), use the contact method listed in our Privacy Policy.

Section A - Sub-processors (used when we act as controller or processor)

Vendors that process Customer Personal Data on client instructions when we act as processor. These vendors may also support us when we act as controller; in that context, they act as our processors (not as a client's sub-processors).

Name (legal entity) Region Data types Purpose Transfer mechanism / notes
Amazon Web Services, Inc. United States (primary) Entrants, winners, limited client admin data Hosting, infrastructure & data storage Encryption at rest/in transit. Also used when we act as controller. If EEA/UK data is hosted in the U.S., SCCs/UK IDTA as applicable.
Checkissuing LLC United States Winner/payee names, mailing addresses, payment amounts; check number/issue metadata Prize fulfillment by check printing and mailing Processor on our instructions; also used when we act as controller for vendor/payee payments. No card data collected; no recipient bank details. If EEA/UK data, SCCs/UK IDTA as applicable.
Checkr, Inc. United States Eligibility/background screening data for SweepstakesPros personnel and for finalists/winners where required by rules Background screening; identity/eligibility verification; sanctions screening where applicable Role may vary by jurisdiction and service configuration. When acting on our instructions, acts as a processor; in some cases may be joint or independent controller. If EEA/UK data, SCCs/UK IDTA as applicable.
DocuSign, Inc. United States Names, contact info, signatures (and government IDs and tax IDs if collected) Digital agreements & signatures (for example, winner affidavits) Access scoped to envelopes. Also used when we act as controller. If EEA/UK data, SCCs/UK IDTA as applicable.
Google LLC (Workspace) United States (tenant-configured) Client communications and files; support artifacts; personal data contained in email and documents Email, docs, drive storage, support tickets Also used when we act as controller. If EEA/UK data is processed, SCCs/UK IDTA as applicable.
Greatland Corporation United States Winner/payee names, addresses, TINs (if provided) Tax form generation and filing for client winners (for example, 1099) Also used when we act as controller for our vendor/payee filings. If EEA/UK data, SCCs/UK IDTA as applicable.
Microsoft Corporation (Microsoft 365) United States (tenant-configured) Client communications and files; support artifacts; personal data contained in email and documents Email, file storage and collaboration (Exchange Online, OneDrive, SharePoint) Also used when we act as controller. Tenant security controls applied. If EEA/UK data is processed, SCCs/UK IDTA as applicable.
Pancake Laboratories, Inc. d/b/a ShortStack United States Entrant submissions, form metadata, IP addresses (and government IDs and tax IDs if collected) Promotions platform hosting/forms U.S. hosting. Also used when we act as controller. If EEA/UK data is processed, SCCs/UK IDTA as applicable.
SignNow (airSlate Inc.) United States Names, contact info, signatures (and government IDs and tax IDs if collected) Digital agreements & signatures Also used when we act as controller. If EEA/UK data, SCCs/UK IDTA as applicable.
Veremark Ltd United Kingdom Eligibility/background screening data for SweepstakesPros personnel and for finalists/winners where required by rules Background screening; identity/eligibility verification; sanctions screening where applicable Role may vary by jurisdiction and service configuration. When acting on our instructions, acts as a processor; in some cases may be joint or independent controller. If EEA/UK data, SCCs/UK IDTA as applicable.

Section B - Service providers (we act as controller)

Operational vendors that support our services but are not client sub-processors.

Name Region Purpose Data types
Authorize.Net, LLC (Visa) United States Payment gateway for client credit card payments Cardholder name and billing details; payment authorization metadata; gateway processes card data (we do not store full card numbers)
Checkissuing LLC United States Check printing and mailing for our vendor/payee payments Payee names, mailing addresses, payment amounts; check number/issue metadata
FedEx Corporate Services, Inc. United States (global) Sending and receiving shipments; prize shipping for promotions Names and mailing addresses on labels
Greatland Corporation United States Tax form generation and filing for our own vendor/payee obligations and client winners Payee names, addresses, TINs (if provided)
Intuit Inc. (QuickBooks) United States & other countries Accounting & AR/AP Client billing contacts, invoices, payment records
RingCentral, Inc. United States Telephony & fax Caller IDs, voicemails
United Parcel Service of America, Inc. (UPS) United States (global) Sending and receiving shipments; prize shipping for promotions Names and mailing addresses on labels
United States Postal Service United States (global delivery options via partners) Sending and receiving mail for entries and winners; prize shipping for promotions Names and mailing addresses on labels and envelopes; entry information printed on postcards as submitted by participants

Section C - Independent controllers / partners

These parties generally collect and use personal data directly under their own privacy policies. We may share limited information to fulfill a participant's request (for example, prize delivery), or receive user-submitted identifiers/content when participants engage with our promotions on these platforms. See our Cookie Policy for adtech/tracking details and your choices (including "do not sell/share" where applicable).

Name Region Purpose / relationship
Amazon.com, Inc. United States Prize sourcing and fulfillment marketplace
American Express Company United States (& global per provider) Prize/payment issuer; may perform identity/eligibility verification, sanctions screening, and fraud checks under its own policies
Facebook & Instagram (Meta); LinkedIn; Pinterest; TikTok; X (formerly Twitter); YouTube (Google) Global Content and engagement channels; users interact under platform terms; we may ingest public handles/comments for promotion administration
JPMorgan Chase & Co. (Chase Bill Pay) United States (& global per provider) Prize/payment issuance via Bill Pay checks; may perform identity/eligibility and sanctions screening and fraud checks under its own policies
Medmatics, LLC d/b/a Virtual Incentives United States Gift card prize fulfillment (often independent controller for issuance/compliance)
PayPal United States (& global per provider) Prize/payment issuer; may perform identity/eligibility verification, sanctions screening, and fraud checks under its own policies
Tango Card, Inc. United States Gift card prize fulfillment (often independent controller for issuance/compliance)

We will update this page to reflect additions or changes in accordance with our privacy policy and applicable data protection laws. If SweepstakesPros begins processing EEA/UK data, we will implement appropriate transfer mechanisms (for example, SCCs/UK IDTA) and update this page accordingly.