Notice of Sub-processor Addition

Notice of Sub-processor Addition

Created/Published online: June 10, 2026

iGrafx is providing notice to you that a new additional third-party sub-processor (identified below) may process your company repository data provided on your iGrafx Cloud Server. 

iGrafx Search, SIEM, and Observability Processor Addition 

elasticsearch B.V. (hereinafter the “Subprocessor”) will be added as a new third-party sub-processor which will be providing enterprise search, SIEM-based security monitoring, and infrastructure observability. 

Use of the iGrafx Cloud search or identity services may include details such as company repository information, identity information, network IP addresses, endpoint telemetry, system/application logs, security events, and infrastructure performance metrics which will be relayed through the Subprocessor. 

You may find information about the Subprocessor at: 

www.elastic.co and https://assurance.elastic.co/. 

Information on the Subprocessor’s privacy practices can be found at: 

www.elastic.co/legal/privacy-statement.  

Please email [email protected] within 10 days from the date of this notice or within the time period specified within your specific contractual agreement with iGrafx if you would like to request additional information regarding this change or, if the EU Standard Contractual Clauses (the “SCCs”) are applicable to you, you desire to raise a reasonable objection to the appointment of this Subprocessor as allowed under the SCCs. If the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses is applicable to you, you similarly have the right to raise a reasonable objection to this appointment. If the Swiss Standard Data Protection Clauses or equivalent transfer mechanism under the Swiss Federal Act on Data Protection (revFADP) is applicable to you, you likewise have the right to raise a reasonable objection to this appointment. For customers subject to other applicable data protection laws, including but not limited to Canada’s PIPEDA, Japan’s APPI, and applicable US state privacy laws, iGrafx will ensure that the appointment of this Subprocessor is governed by appropriate contractual safeguards consistent with those laws.