We've recently updated ORCID'S Privacy Policy to be simple to understand and easy to navigate. We invite you to read it here.

Connecting research and researchers

You are here: Home / Documentation / Member Portal / Sub-processors

Sub-processors

As part of our obligation to comply with GDPR, we are required to publish a list of sub-processors used for the Member Portal.

Please note that we do not currently publish a list of sub-processors for the ORCID Registry.

ORCID, Inc. uses sub-processors to help provide its services to members and users. A sub-processor is a third party service provider who has or potentially will have access to personal data in order to process the data on behalf of ORCID.

Member Portal

The following sub-processors are used on the Member Portal.

Sub-processorPurposeLocation
AWSApplication servers, file storage, and related hosting servicesUnited States
MongoDB AtlasCloud database serviceUnited States
CloudflareContent Delivery Network, application firewall, and related services.Global
Rapid7Application and access log analysisUnited States
OneTrustCookie consent managementUnited States

Notification of changes

ORCID will notify member organizations of any changes to the list of sub-processors, by email 30 days prior to the start of processing by any new sub-processor.

Any objections to the changes should be raised with the contact listed in your organization’s data protection agreement, your member support contact, or the ORCID Support Team.