As part of our obligation to comply with GDPR, we are required to publish a list of sub-processors used for the Member Portal.
Please note that we do not currently publish a list of sub-processors for the ORCID Registry.
ORCID, Inc. uses sub-processors to help provide its services to members and users. A sub-processor is a third party service provider who has or potentially will have access to personal data in order to process the data on behalf of ORCID.
The following sub-processors are used on the Member Portal.
|AWS||Application servers, file storage, and related hosting services||United States|
|MongoDB Atlas||Cloud database service||United States|
|Cloudflare||Content Delivery Network, application firewall, and related services.||Global|
|Rapid7||Application and access log analysis||United States|
Notification of changes
ORCID will notify member organizations of any changes to the list of sub-processors, by email 30 days prior to the start of processing by any new sub-processor.
Any objections to the changes should be raised with the contact listed in your organization’s data protection agreement, your member support contact, or the ORCID Support Team.