Last updated on February 2nd, 2023

About Cypress

Cypress is the new standard in front-end testing that every developer and QA engineer needs.

With millions of downloads and users in over 90 countries, Cypress is the leader in browser based test automation for the modern web. Cypress enables developers and enterprises to easily, quickly and accurately test anything that runs in the browser, empowering developers to build modern web applications faster, better.

Article 28 GDPR - Subprocessor Requirements

In accordance with article 28 of GDPR, Cypress follows all required obligations, including notifying Cypress’s customers (data controllers) of its existing subprocessors, as well as any changes to its subprocessor list as required.

What is a Subprocessor

A Subprocessor is a third-party engaged by Cypress, who has access to, or processes customer data (which may contain personal data) to assist Cypress in providing services to its customers. The listing below provides a brief description of each subprocessor.

Due Diligence

Cypress undertakes the use of a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality of practices of proposed Subprocessors that will or may have access to, or process customer data. Cypress performs enhanced security assessments prior to onboarding new Subprocessors as well as annually thereafter to ensure continued compliance.

How we share your personal information

Cypress requires all Subprocessors to satisfy equivalent obligations as those required of Cypress (as a data processor), including but not limited to:

  • Process personal data in accordance with data controllers’ documented instructions
  • Provide regular security and data protection training to employees with access to customer data
  • Implement and maintain appropriate technical and organization safeguards to help ensure data security and privacy
  • Cypress to perform regular assessments of its subprocessors during onboarding and annually thereafter
  • Subprocessors to inform Cypress of any suspected/actual breaches and cooperate in any investigations that may rise as a result
Application services / hosting Location
Amazon Web ServicesU.S.
Salesforce (Heroku)U.S.
Customer support / sales operations / ticketing Location
AtlassianU.S. (Customer engagement)U.S.
Salesforce cloud servicesU.S.
Data analytics Location
dbt (Heroku)U.S.

Note: This document is not legally binding between Cypress and its customers. This document is only to provide a list of subprocessors, who may process/store/access customer data.