Sub-processors and sub-contractors

Last updated: 19 October 2026

About this page

GoJoe App Limited ("GoJoe") uses carefully selected service providers to deliver the GoJoe App, web platform and Performance Hub. This page lists those providers, what they do for us, the personal data they handle and where they process it. It also lists the individual contractors who work on our platform, by country, and the suppliers we use that do not receive member or administrator data.

This page forms part of our Privacy Policy and is the list of sub-processors referred to in our contracts with clients.

How we choose and manage providers

All providers are onboarded under GoJoe's ISO 27001-certified vendor management process. Before a provider receives personal data, we:

carry out security and privacy due diligence;
put in place a data processing agreement or equivalent terms, limiting the provider to the services described on this page; and
where personal data leaves the UK or the European Economic Area, put in place an appropriate transfer safeguard: an adequacy decision (including the UK Extension to the EU-US Data Privacy Framework, where the provider holds a current certification), or the EU Standard Contractual Clauses with the UK Addendum.

Primary storage for all platform data is Amazon Web Services in Dublin, Ireland, with backups in the same region, encrypted at rest. Some features can be switched on or off for each client deployment, and some are not available in particular countries where local law requires it.

Changes to this list

We update this page before a new provider begins processing personal data or an existing provider changes its location of processing. Where our contract with a client requires advance notice of a new sub-processor, we give that notice in accordance with the contract. Clients who would like to be notified of changes can ask at privacy@gojoe.com.

1. Sub-processors

These providers process personal data of members (client employees and other users) or client administrators as part of delivering our services. Each receives only the data described, for the purpose described.

Provider	Service	Personal data	Location of processing
Infrastructure, identity and messaging
Amazon Web Services (Amazon Web Services EMEA SARL / Amazon Web Services, Inc.)	Cloud hosting for the whole platform: application servers, databases, media storage, backups and secrets management.	All member and administrator data held by the platform (account, profile, eligibility, activity, wearable, chat, media, support and reporting data).	Dublin, Ireland (all application data, databases, media and backups).
Auth0 (Okta, Inc.)	Authentication and one-time passcodes; single sign-on for existing SSO-enabled client deployments.	Login identifiers (email address or employee ID), one-time passcodes, SSO assertions, session and login metadata. GoJoe does not use passwords.	EU region (Dublin, Ireland / Frankfurt, Germany).
Microsoft Entra ID (Microsoft Ireland Operations Ltd / Microsoft Corporation)	Single sign-on with client identity providers for new client deployments.	Login identifiers, SSO assertions and tokens, session and sign-in metadata.	European Union.
Stream (Stream.io, Inc.)	In-app chat.	Display name, user ID, avatar, message content and attachments, read status.	Dublin, Ireland.
Customer.io (Peaberry Software, Inc.)	Transactional email and push notifications, including login codes, invitations and programme communications.	Name, email address, device push token, user ID, programme attributes, message events.	Belgium (EU).
Google Firebase (Google LLC / Google Ireland Ltd)	In-app notification feed and the short-lived tokens the app uses to read it.	Recipient user ID, notification content, the acting user's ID, display name and avatar, in-app link and event data.	London, United Kingdom.
Support, analytics and monitoring
Intercom (Intercom, Inc. / Intercom R&D Unlimited Company)	In-app help centre and customer support. Intercom's AI agent gives the first response, with hand-off to our support team on every conversation.	User ID, name, email address, employer or programme, and support conversations.	United States.
PostHog (PostHog, Inc.)	Product analytics for web and mobile.	Pseudonymous user ID, device and app information, in-app events. No message content.	Frankfurt, Germany.
Segment (Twilio Inc.)	Routing of analytics events to our analytics tools.	Pseudonymous user ID, device and app information, in-app events.	United States.
Grafana Cloud (Raintank, Inc.)	Logs, metrics and traces for our backend, mobile and web apps.	Internal user ID, IP address and request information. No names, email addresses or message content.	Frankfurt, Germany.
Sentry (Functional Software, Inc.)	Crash and error monitoring.	Pseudonymous installation ID (not linked to the GoJoe user record), approximate location derived from IP address, device and app information.	United States.
Product features
OpenAI (OpenAI OpCo, LLC)	Automated moderation of posts, comments and images against our community guidelines.	Text of posts submitted for moderation and, where a post contains an image, a link to it. No user identifier is attached. Zero Data Retention applies, so OpenAI does not keep the content.	United States.
Google Cloud Translation (Google LLC / Google Ireland Ltd)	Translation of programme communications, and of posts or chat messages when a member selects "translate".	The text to be translated only, with no user identifier attached.	Global service.
Mapbox (Mapbox, Inc.)	Maps for GPS-tracked activities and challenge maps. Not used for users in the Republic of Korea.	Map requests, including approximate location or route coordinates being displayed, and IP address.	United States.
Branch (Branch Metrics, Inc.)	Deep linking and app-install attribution. GoJoe consumer app only; not used in white-label or enterprise deployments.	Device identifiers, link click events.	United States.
Typeform (TYPEFORM S.L.)	Optional feedback form offered to members who rate the app poorly.	Feedback the member chooses to give.	United States.
Rewards
Tillo (Tillo Ltd)	Issue and delivery of gift-card rewards that members redeem.	Name, email address and reward selection (brand, value and currency).	United Kingdom, United States and Australia.
Internal operations
Slack (Slack Technologies, LLC)	Internal alerts to GoJoe staff (system, content-moderation and benefits alerts).	User ID, post or comment ID, moderation reason, a short extract of flagged content and, where relevant, an image link. No name or email address.	United States.
Country-specific
Sinnogrow Co., Ltd (AppInChina)	Publisher and operator of record of the China version of the GoJoe App and web platform in mainland China, including an in-country reverse proxy that forwards traffic to our hosting in Ireland. Used only for members using the China version.	IP address and request data passing through the proxy, and proxy access logs. Application data is not stored in China.	Mainland China (proxy only).

2. Wearable and fitness app connections chosen by members

A member may choose to connect a wearable device or fitness app so that their activity counts automatically. The member authorises the connection through the provider's own consent flow and can disconnect it at any time in the GoJoe App or with the provider. These providers are not appointed by GoJoe: the member already uses them, and GoJoe receives a copy of the activity records the member chooses to share, which we store in Ireland. No client-provided data is sent to them. Clients can limit which connections are available.

Provider	Data GoJoe receives	Provider hosting location	Basis
On-device sources (no vendor cloud in the data path)
Apple HealthKit	Workouts, steps and routes from iPhone and Apple Watch, and apps that write to HealthKit.	On the member's device only.	Operating-system consent per data type, revocable in iOS Settings.
Google Health Connect	Workouts and steps from Android devices, including Samsung Health and Galaxy Watch.	On the member's device only.	Operating-system consent, revocable in Android settings.
Cloud connections (the member authorises GoJoe to receive data the provider already holds)
Garmin (Garmin International, Inc.; Garmin Würzburg GmbH in the EEA)	Workouts, steps, heart rate.	United States (also UK and Australia).	Member-authorised connection, revocable at any time.
Fitbit (Google LLC)	Workouts, steps, heart rate.	United States.	As above.
WHOOP (WHOOP, Inc.)	Workouts, recovery and strain.	United States.	As above.
Wahoo (Wahoo Fitness, LLC)	Workouts.	United States.	As above.
Polar (Polar Electro Oy)	Workouts, steps.	Ireland and Sweden.	As above.
Suunto (Suunto Oy)	Workouts.	EEA.	As above.
COROS (COROS Wearables, Inc.)	Workouts.	EEA for EU and UK members; United States for other members.	As above.
Withings (Withings SA)	Activity, and weight and blood-pressure measures if the member uses those devices.	Primarily France (EU).	As above.
Oura (Ōura Health Oy)	Activity, sleep and readiness summaries.	Not published by the provider.	As above.
Huawei Health (Aspiegel SE in Europe)	Profile, steps and activity records.	Not published by the provider.	As above. Can be switched off for a client deployment.

3. Suppliers that do not receive member or administrator data

These suppliers support our platform but do not receive member or administrator records. We list them so that our supply chain is visible in full.

Supplier	Service	Location	Personal data
Xoxoday	Gift-card codes for rewards (alternative provider). GoJoe requests a code by value and currency and delivers it to the member in-app.	Singapore.	None.
Transistorsoft	Licensed software for background GPS tracking. Location data goes from the device to GoJoe; the supplier only validates the licence.	Not applicable.	None.
Expo / EAS	Mobile app builds and app updates.	United States.	None.
GitHub / CircleCI	Source control and software deployment.	United States.	None.
Mux / Vimeo	Hosting and streaming of wellbeing videos.	United States.	The viewer's IP address when a video is played, used only to deliver it and not linked to a GoJoe member record.
Les Mills / Caravan Wellness	Licensed wellbeing content.	Not applicable (content comes to GoJoe; no member data goes to the partner).	None.
Localazy	Translation management for app text.	EU.	None.
RapidAPI (API Ninjas)	Currency exchange rates for rewards pricing.	United States.	None.
Pexels	Stock images for administrators building content.	United States.	None.
Drata	Compliance automation for GoJoe's ISO 27001 programme (GoJoe corporate systems only).	United States.	None.

4. Sub-contractors (individuals)

GoJoe's team works remotely. Personal data may be accessed by GoJoe personnel in the countries below for support, implementation, engineering, data and account management. Access is role-based, limited to people with a business need, protected by multi-factor authentication and logged. All personnel complete security awareness training when they join and at least once a year, and are bound by confidentiality and data protection obligations.

Country	Functions	Transfer safeguard	Contractual basis
United Kingdom	Product, client success, operations, engineering, finance, leadership	Not applicable - GoJoe App Limited is established in the UK.	Employees of GoJoe App Limited.
Romania	Engineering, data	Within the EEA (UK adequacy decision applies).	Full-time contractors bound by confidentiality, data protection and information security obligations.
Spain	Engineering	Within the EEA (UK adequacy decision applies).	Full-time contractor engaged through an employer of record, bound by the same obligations.
United States	Client success and account management for US clients	International Data Transfer Agreement approved by the UK Information Commissioner, signed with each individual and EU Standard Contractual Clauses for personal data subject to the EU GDPR.	Full-time contractors engaged through an employer of record, bound by the same obligations.
Philippines	Implementation and client success operations	International Data Transfer Agreement approved by the UK Information Commissioner, signed with each individual and EU Standard Contractual Clauses for personal data subject to the EU GDPR.	Full-time contractors bound by the same obligations.

5. Programme-specific partners

Some services use additional partners only where a client has commissioned them:

Clinical and screening partners: where a client commissions biometric screening or preventive health services in the United States, we work with specialist partners (for example Marquee Health and eHealthScreenings) under agreed data flows and contracts. Details are given to the client when the service is scoped.
Benefits navigation and HR system integrations (such as eligibility feeds and single sign-on): these connect to the client's own systems and existing vendors, which are not GoJoe sub-processors.
SMS and WhatsApp one-time passcodes: where a client chooses this option for members without a work email address, the messaging provider is named in that client's order form.

Contact

Questions about this page, or requests for copies of provider agreements and certifications, can be sent to our Data Privacy Lead at privacy@gojoe.com.

Request Info, a Demo or a Free Quote

Sub-processors and sub-contractors

Your People's Health Is Your Business's Biggest Asset. Treat It That Way.