Sub-processors

A sub-processor is a third party we engage that may handle your data while helping us run the service. Infrastructure, transactional email and error reporting are the usual examples.

A vendor that never touches customer data is not on this list. Our accounting software does not appear here, because your employee records never reach it.

The categories below reflect how Kiko is operated. Because this is a demonstration product, the specific vendor names and contract references that would normally appear in each row are provided on request rather than published here.

• Cloud infrastructure and managed database: hosting, storage and backups for the production workspace. Indian cloud regions, with backups held in India.
• Object storage and content delivery: documents, payslip files and profile images. Indian regions, with cached delivery from edge locations.
• Transactional email and messaging: sign in links, approval notifications and payroll alerts. Recipient name, work email and the notification content only.
• Error and performance monitoring: diagnostic traces when something fails. Configured to scrub salary, bank and identifier fields before a trace leaves the workspace.
• Support ticketing: the correspondence you send us, plus whatever you choose to attach to a ticket.
• Payment and invoicing: your billing contact and invoice data. No employee records reach this system.

No sub-processor is permitted to use your data for its own purposes, to train models on it, or to disclose it to anyone else.

We do not use advertising, marketing enrichment or data broker services anywhere in the platform. There is nothing in Kiko that would benefit from them.

Before engaging a sub-processor we review its security posture, its own sub-processors, where it stores data and what its breach commitments are. Anything handling salary, identifier or bank data is held to a higher bar and kept inside India.

Each one is contractually bound to obligations no less protective than the Data Processing Addendum, and we remain responsible to you for what they do.

We give at least 30 days notice before a new sub-processor starts handling your data. Notice goes to your administrator and to any address you register for the purpose.

You can object on reasonable data protection grounds during that window. If we cannot address the objection, you may terminate the affected part of the subscription and take a pro rata refund for the unused period.

Emergency replacement of a failing vendor is the one exception. Where we have to move quickly to keep the service running, we will tell you as soon as the change is made and explain why notice was not possible.

Write to privacy@kiko.co to be added to the notification list for this page, or to request the current list with vendor names and contract references.