Sub-processors
Introduction
To deliver our services, Intuto Limited ("Intuto") engages external service providers known as Sub-processors, who may access certain personal information to perform specific functions on our behalf.
This page is your single source of truth for the identity, location, purpose, and data accessed by each Sub-processor we use. We update this page promptly following any change to our Sub-processor arrangements.
Terms used here but not defined are outlined in our Terms of Use or your Data Processing Agreement (DPA), where applicable.
How We Protect Your Information
We take the privacy and security of your personal data seriously. We share information with Sub-processors only when strictly necessary to deliver our services, and only to the extent required for that purpose. We work with Sub-processors who maintain appropriate technical and organisational security measures and handle personal information in accordance with applicable privacy law including the New Zealand Privacy Act 2020, the Australian Privacy Principles, and GDPR where relevant.
Infrastructure Sub-processors – Service Data Storage
These organisations are responsible for securely hosting and storing the Intuto Service Data, which includes all customer information, content, and learning records.
| Entity Name | Purpose | Entity Country | Data Hosted | Data Categories Accessed |
| Microsoft Corporation (Azure) | Primary Cloud Service Provider and Hosting | United States | New Zealand (Auckland data centre exclusively) | All Customer Data, User IDs, Names, Emails, Usage Logs, Content. |
Important note: Although Microsoft Corporation is a United States entity, all Intuto LMS data is hosted exclusively within the Microsoft Azure New Zealand (Auckland) data centre region. No LMS learner data is stored in the United States or any other jurisdiction.
Authentication Sub-processors
These providers support optional Single Sign-On (SSO) authentication for users accessing the Platform. Where SSO is used, the provider shares only the user's name and email address with Intuto for the purpose of verifying identity and creating or accessing an account. No passwords or additional data are received.
| Entity Name | Purpose | Entity Country | Data Categories Accessed |
| Google LLC | SSO Authentication and Website Analytics | United States | SSO: User IDs, Names, Email Addresses (authentication only). Analytics: Anonymised website usage data. |
| Meta Platforms Inc. | SSO Authentication | United States | User IDs, Names, Email Addresses (authentication only). |
Service Specific Sub-processors
We work with the following third-parties to provide essential functions and features within the Intuto Service.
| Entity Name | Purpose | Entity Country | Data Categories Accessed |
| Datadog | System Logging and Performance Monitoring | Australia | Usage Data, IP Addresses, User IDs, System Event Logs. |
| Drata | SOC 2 Compliance Monitoring and Auditing | United States | Audit Logs, User IDs, Names, Access Data. |
| Mandrill, Inc | Cloud-based Email Notification Services | United States | User Email Addresses, Notification Content. |
| Mailchimp (Intuit) | Marketing Email Communications | United States | User Email Addresses, Communication Preferences. |
Billing and Financial Sub-processors
| Entity Name | Purpose | Entity Country | Data Categories Accessed |
| Stripe, Inc. | Payment Processing | United States | Name, Email, Billing Address, Transaction Details, Payment Tokens. |
| Xero Limited | Accounting and Billing Record Keeping | Australia | Name, Email, Billing Address, Transaction Details. |
Customer Success and Development Support
| Entity Name | Purpose | Entity Country | Data Categories Accessed |
| HubSpot Inc. | Customer Relationship Management (CRM) and Support | United States | CRM Data, Support Ticket Data, User IDs, Names, Emails. |
| Jira (Atlassian) | Development Planning and Ticketing | United States | User IDs, Names, Emails (for specific bug reports/feature requests). |
Optional Integrations
Intuto offers integrations with third-party platforms including Membes, Tradewing, WebCastCloud and others. These partners are not Sub-processors — they are services that you as the Client choose to engage with directly.
When you enable an integration, you are directing Intuto to securely transfer relevant data to that partner. The handling of data by the partner is governed by your agreement with that partner and their own privacy policy. Intuto is not responsible for the privacy practices of integration partners.
You can view our full list of available integrations here: Intuto Integrations.
Changes and Updates
As Intuto grows, the Sub-processors we engage may change. We are committed to transparency. We will update this page promptly following any change to our Sub-processor arrangements and notify the account owner via email once the update is live.
If you have any questions about our Sub-processors or data handling practices, please contact us at support@intuto.com.