Digital Solution Sub-processors
Effective Date: November 18, 2024
What is a Processor or Sub-Processor
A sub-processor is a third-party data processor that Exos engages to process personal data to assist Exos with delivering “Exos Offerings” (as defined in our privacy policy).
Exos may be considered a "processor" or a "controller," within the meaning of applicable data protection law, of the data that these sub-processors process: (a) when an Exos client (e.g., employer) facilitates access to the Exos Offerings, Exos serves as a “data processor” of the data that clients transmit to Exos in their corporate capacity (e.g., list of employees eligible to access the Offerings) and (b) when an end user or “Member” accesses the Offerings (fitness/wellness services), Exos serves as controller of the data it collects directly from those Members as individuals. Where Exos serves as a Controller, it provides privacy rights as described in its privacy policy (e.g., the right to delete and access data).
Contractual Safeguards
If you are an Exos client and wish to sign onto the Exos Data Processing Agreement about the data over which you act as a controller, please contact legal-notices@teamexos.com.
Additionally, please be assured that Exos requires its sub-processors to satisfy privacy and security obligations consistent with those described in the Exos Privacy Policy such as to:
- process personal data following Exos’ documented instructions;
- promptly inform Exos about relevant security matters; and
- cooperate with Exos to assist with fulfilling data privacy requests.
Process to Engage New Sub-processors
Exos will update this webpage whenever it adds sub-processors, and if you have entered into a Data Processing Agreement with Exos, it will also email your address for notices contained in such agreement.
Affiliates as Sub-processors
To the extent that you are a Member (end user of fitness/wellness services) and use Exos Offerings outside of the United States, Exos may process your personal data via its affiliate located in the applicable country. In addition, depending on the Offering you use, Exos may process your personal data via an applicable US affiliate. Exos affiliates include:
|
Affiliate Name |
Registered Location |
Affiliate Name |
Registered Location |
|
AP Global Services, LLC |
Delaware |
EXOS AP Arizona, LLC |
Georgia |
|
Athletes' Performance, Inc. |
Delaware |
EXOS AP Los, Angeles, LLC |
Delaware |
|
Athletes’ Performance Elite, LLC |
Delaware |
EXOS AP San Diego, LLC |
Delaware |
|
Athletes’ Performance Florida, LLC |
Delaware |
EXOS AP Texas, LLC |
Delaware |
|
Athletes’ Performance Germany GMBH |
Germany |
EXOS Community Health Services, LLC |
New Jersey |
|
Athletes’ Performance Hong Kong Limited |
Hong Kong |
EXOS Community Services, LLC |
New Jersey |
|
Athletes’ Performance International, LLC. |
Delaware |
EXOS Corporate Health Services, LLC |
New Jersey |
|
Athletes’ Performance Management Consultancy Limited |
Beijing |
Exos Health Holdings, LLC. |
Delaware |
|
Athletes’ Performance UK Limited |
United Kingdom |
EXOS Human Capital, LLC |
Delaware |
|
Core Performance Centers, LLC |
Delaware |
EXOS Tactical, LLC |
Delaware |
|
CP International LLC (Singapore Branch) |
Singapore |
EXOS Works Malaysia |
Malaysia |
|
CP International, LLC |
Delaware |
EXOS Works Mexico |
Mexico |
|
CP International, LLC (Ireland Branch) |
Ireland |
Exos Works, Inc. |
New Jersey |
|
CP International, LLC (Zurich Branch) |
Switzerland |
France CP (Bld) |
France |
|
CP Japan |
Japan |
|
|
Third Parties as Sub-processors
Depending on the Exos Offering you use, one or more of the following sub-processors may process your personal data:
|
Sub/Processor |
Processes Client or Member Data |
Purpose |
Data Processed |
Location Data Storage |
Applicable Exos Offering |
Data Safeguards |
|
Amazon RDS |
Both |
Data storage and cloud computing |
All information collected via the applicable Offering |
USA |
Exos App |
Risk and Compliance whitepaper
|
|
Auth0 |
Both |
Registration and authentication |
● First and Last Name ● Email Address ● User ID |
US and EU EEA |
Exos App |
Auth0 Security, Privacy & Compliance
|
|
AWS Cognito |
Both |
Authentication |
● Email Address ● User Demographics |
USA |
Exos App |
Risk and Compliance whitepaper
|
|
AWS DynamoDB |
Member |
Data Storage |
● First and Last Name ● Email Address ● Activity Data (booking history) |
USA |
Exos App |
Risk and Compliance whitepaper
|
|
AWS Web Services |
Both |
Data storage and cloud computing |
All information collected via the applicable Offering |
USA |
Exos App |
Risk and Compliance whitepaper
|
|
BridgeAthletic |
Member |
Training program creation |
● First and last name ● Email address ● Sport, position, level ● Performance data ● Daily questionnaire ● Coach notes ● Movement video |
USA |
Exos Sports Performance Centers and Fitness Center Management |
Bridge Athletic Privacy Policy
|
|
Bear Cognition |
Member |
Data dashboard and visualization platform for Exos practitioners to see athlete data |
● First and last name ● Sport, position, level ● Performance data |
USA |
Exos Sports Performance Centers |
|
|
Cloudflare |
Both |
Web Application Firewall |
● IP Address ● Georeferencing Data |
USA |
Exos App, Coach Hub |
|
|
CookieYes |
Both |
Cookie Compliance |
● IP Address ● Cookie Data |
UK |
Exos’ websites |
|
|
Cronofy |
Member |
Calendar Scheduling |
● Email Address ● Unique ID ● Scheduling Data |
USA
|
Exos App |
|
|
DariMotion |
Member |
Musculoskeletal analysis scanner |
● First and last name ● Email address ● 3D Motion capture data
|
USA |
Exos Sports Performance Centers, Fitness Center Management |
|
|
Delenta |
Member |
Member management system for mindset training service |
● First and last name ● Email address ● Mindset coaching notes |
UK |
Exos Sports Performance Centers |
|
|
DexaFit |
Member |
Software platform used to supply physician prescriptions for DXA scans
|
● First and Last Name ● Email Address ● Birthday ● Demographics ● Health status/history |
USA |
Exos Sports Performance Centers |
|
|
DOMO |
Both |
Data analytics |
● Contact Information ● Fitness and Health Data ● User Event Log Data |
USA |
Exos App |
|
|
Google Workspace |
Both |
Corporate email and file storage |
● Email Address ● IP Address ● First and Last Name ● Coaches Notes ● Contact Information |
USA |
Exos App, Exos Sports Performance Centers, Fitness Center Management |
|
|
Hologic |
Member |
DEXA scan hardware & software required to perform testing & share data with Bear Cognition & DexaFit. |
● First and Last Name ● Email Address ● Birthday ● Demographics ● Body Composition |
USA |
Exos Sports Performance Centers |
|
|
Hubspot |
Both |
Customer relationship management |
● Email Address ● Contact Information ● User Demographics |
Germany, USA |
Exos App, Fitness Center Management |
|
|
Iterable |
Member |
Marketing/Targeted Communications |
● First and Last Name ● User Contact Information ● IP address |
USA |
Exos App |
|
|
Keiser |
Member |
Strength equipment with embedded data capture |
● First and last name ● Email address ● Sport, position, level ● Performance data |
USA, Canada, and EU EEA |
Exos Sports Performance Centers |
|
|
LaunchDarkly |
Member |
Monitoring and tracking |
● Email Address ● User interactions with Exos’ Digital Solution Features
|
"anywhere where we or one of our service providers has services" |
Exos App |
|
|
Looker |
Both |
Data Analytics |
● Contact Information ● Fitness and Health Data ● User Event Log Data |
USA |
Exos App, Fitness Center Management |
|
|
Mindbody Online |
Both |
MMS, Class schedule, Payment |
● First and Last Name ● Email Address ● Birthday ● User Demographics ● Scheduling Information ● Purchase History ● Payment information ● Injury history |
USA |
Exos App, Fitness Center Management |
|
|
Mixpanel |
Member |
Analytics and usage tracking |
● User activity throughout Exos Digital Solutions |
USA |
Exos App |
|
|
Momentum Labs |
Member |
Mindset training service provider |
● First and Last Name ● Mindset Performance history |
US |
Exos sport performance centers |
The use of this service is governed by the Exos terms of use and privacy policy. |
|
Paypal |
Member |
Payment |
● First and Last Name ● Payment Information ● Address ● IP Address |
USA |
Fitness Center Management |
|
|
Paysimple |
Member |
Payment |
● First and Last Name ● Payment Information ● Address ● IP Address |
USA |
Fitness Center Management |
|
|
Practice Better |
Member |
Nutrition Services Management Platform |
● First and Last Name ● Email Address ● Birthday ● User Demographics ● Scheduling Information ● All relevant information completed during a nutrition consult (e.g. health status, body weight/body composition, prescriptions, supplements, digestive health, reproductive health, exercise information, dietary habits,and lifestyle habits). |
Canada |
Exos Sports Performance Centers |
|
|
Qualtrics |
Both |
Surveys |
● First and Last Name ● Email Address ● IP Address |
USA |
Exos App, Fitness Center Management |
|
|
RedCard |
Member |
Meal plan delivery service for Members of Exos Sport Performance Centers |
● First and Last Name ● Email Address ● Phone Number ● Dietary c |
USA |
Exos Sports Performance Centers |
|
|
Sendgrid |
Member |
Transactional emails |
● Email Address ● First and Last Name ● User Activity ● IP Address |
USA |
Exos App |
|
|
Sentry |
Member |
Security |
Email Address ● User Demographics |
USA "and other countries where Sentry or its affiliates, future subsidiaries or service providers maintain facilities" |
Exos App |
|
|
Snowflake |
Both |
Data management |
● First and Last Name ● Email Address ● Birthday ● User Demographics ● Scheduling Information ● Purchase History ● User Activity |
USA |
Exos App, Fitness Center Management, and Exos Sports Performance Centers |
|
|
Split.io |
Member |
Monitoring and tracking |
● Email Address ● User interactions with Exos’ Digital Solution Features
|
USA |
Exos App |
|
|
Stripe |
Member |
Payment |
● First and Last Name ● Payment Information ● Address ● IP Address |
"We may transfer your Personal Data to countries other than your own country, including to the United States." |
Fitness Center Management |
|
|
Waiverking |
Member |
Registration processing platform |
● First and last name ● Sport, position, level ● Medical history
|
USA |
Exos Sports Performance Centers |
|
|
WebPT |
Member |
Physical Therapy Member Management platform |
All information collected for Physical Therapy Services. |
USA |
Exos Sports Performance Centers |
|
|
Wistia |
Member |
Video hosting |
● IP Address ● User Video Content Usage Data |
USA |
Exos App |
|
|
Woodway |
Member |
Cardiovascular training equipment with embedded data capture. |
● First and Last Name ● Training Data ● Health data, such as Weight, heart rate, recovery value |
USA |
Exos Sports Performance Centers |
|
|
Vald Performance |
Member |
Force and Strength assessment |
● First and Last Name ● Demographics ● Date of Birth |
USA and EEA |
Exos Sports Performance Centers |
|
|
Zendesk |
Member |
Data subject request and support request manager |
● Name ● Email address ● Account type ● Country ● IP address ● DSAR reports ● User cookie preferences |
USA |
Exos App |
Compliance Certifications and Memberships
|
|
ZoneIn |
Member |
Nutrition meal planning and analysis tool |
● First and Last Name ● Demographics ● Date of Birth ● Dietary intake ● Email address |
USA |
Exos Sports Performance Centers |
|
|
Zoom |
Member |
Default video solution for classes & consults |
● Email Address ● User Contact Information ● User Demographics ● Zoom Chat log |
USA |
Exos App |
|
VERSION HISTORY