Sub-processor List

Last updated: 2026-09-11

This page lists the service providers (sub-processors) that may access personal data while the YouReply Survey service is provided, and where they are located. The list forms an integral part of the Privacy Notice and Privacy Policy and the Data Processing Agreement.

1. What is a sub-processor?

A sub-processor is a third party that processes personal data on behalf of a data processor and on its instructions in order to provide a service: for example the company hosting the servers, the service that delivers emails, or the software that issues invoices. Sub-processors may not use the data for their own purposes; they process it only to the extent required by the service they provide to us.

2. Current list

Sub-processors
ProviderServiceData processedLocationTransfer abroad
Hosting Dünyam Bilişim Teknolojileri Tic. Ltd. Şti.Server hosting: web applications and databaseAll data held on the platform (accounts, billing records, surveys and responses)Türkiye (Istanbul)No
Amazon Web Services (Amazon S3)File storage: survey images, files and signatures uploaded by respondentsImages added to surveys; answers to file upload and signature questionsGermany (Frankfurt, eu-central-1)Yes
Amazon Web Services (Amazon SES)Email deliveryRecipient email address and name, email content (account notices, contract copies, contact form messages)Germany (Frankfurt, eu-central-1)Yes
Google (Google Workspace)Company mailboxes: contact form and support correspondenceEmails you send us and contact form messagesGoogle data centres (including the United States)Yes
iyzico Ödeme Hizmetleri A.Ş.Payment service (card payment, 3D Secure)Name, email, phone, Turkish ID number, billing address, IP address, order details. Card details never reach YouReply.TürkiyeNo
Paraşüte-Invoice and e-Archive invoicingName or company name, email, tax number and office, address, phone, invoice amountTürkiyeNo
VatanSMSSending sign-in verification codes by SMSPhone number and verification codeTürkiyeNo

Transfers to providers marked "Yes" in the "Transfer abroad" column rely on one of the transfer mechanisms provided for in Article 9 of the KVKK (for example, a standard contract).

3. Which of them touch survey data?

Only the following providers can access survey data processed on the researcher's behalf (survey content and respondent answers):

Sub-processors
ProviderServiceData processedLocationTransfer abroad
Hosting Dünyam Bilişim Teknolojileri Tic. Ltd. Şti.Server hosting: web applications and databaseAll data held on the platform (accounts, billing records, surveys and responses)Türkiye (Istanbul)No
Amazon Web Services (Amazon S3)File storage: survey images, files and signatures uploaded by respondentsImages added to surveys; answers to file upload and signature questionsGermany (Frankfurt, eu-central-1)Yes

The other providers work with account, order, invoice, email or support data and do not access survey responses. The roles are described in detail in the Data Processing Agreement.

4. Third parties that are not sub-processors

The following parties do not process data on our behalf; they are independent parties subject to their own terms:

  • Google Maps: The map on the contact page loads only when you allow external media or choose to load the map. When it loads, Google LLC receives your IP address and browser information directly. See the Cookie Policy.
  • YouTube and Vimeo: If a researcher adds a video to a survey, the video loads from that provider's servers and the respondent's browser connects to it directly. The decision to add such content to a survey is the researcher's.

5. How changes are announced

When a new sub-processor is added or a provider's location changes, this page is updated and the last updated date shown at the top of the page changes. The current list is always on this page; we recommend reviewing it from time to time.

6. Questions

For questions about the list, write to kvkk@youreply.com.tr.

All legal documents