Subprocessors

To support the delivery of our Services, Carnegie engages certain third-party entities (‘Subprocessors’) to process Client Personal Data. Pursuant to Section 5 of the Carnegie Data Processing Addendum (DPA), each Subprocessor listed below is bound by a written agreement imposing data protection obligations comparable to those in the DPA. By utilizing the Services, Client acknowledges that these entities may process Client Personal Data as necessary to provide the Services for the Permitted Purposes defined in our agreement.

Advertising & Marketing Technology

Subprocessor Entity	Purpose of Processing	Data Privacy Terms
Bing (Microsoft)	Search engine advertising and attribution.	View DPA
Google Ads	Digital advertising and audience matching.	View DPA
LinkedIn	Professional advertising and lead generation.	View DPA
Meta	Social media advertising and tracking.	View DPA
Quantcast	Audience measurement and orchestration.	View DPA
Reddit	Community-based advertising.	View DPA
Snapchat	Mobile advertising and attribution.	View DPA
Spotify	Audio advertising and listener analysis.	View Privacy Policy
TikTok	Social media advertising and attribution.	View Data Sharing Agreement
X (Twitter)	Engagement tracking and advertising.	View DPA
Viant	People-based programmatic execution.	View Privacy Policy
Sprout Social	Social media management and analytics.	View DPA

Data, Research & Analytics

Subprocessor Entity	Purpose of Processing	Data Privacy Terms
BlueConic	Behavioral analysis and segmentation.	View Data Security Overview
Google Cloud / BigQuery	Cloud storage and large-scale analysis.	View DPA
Omniconvert	Conversion optimization and A/B testing.	View DPA
E-spatial	Mapping and GIS spatial data analysis.	View Security Statement
IBM SPSS	Advanced statistical data analysis.	View Privacy Policy
Qualtrics	Perception research surveys.	View DPA
Protobi	Research data visualization.	View Privacy Policy
Posit	Statistical computing environments.	View DPA
Oracle	Enterprise data management.	View DPA

Enrollment, CRM, & Specialized Services

Subprocessor Entity	Purpose of Processing	Data Privacy Terms
Enrollment Resources	Strategic enrollment management.	View Privacy Policy
Technolutions (Slate)	Student record and CRM management.	View Privacy Policy
SharpSpring	Marketing automation and lead nurturing.	View DPA
Moodle	Learning management system delivery.	View DPA
Roundhouse	Creative production processing.	View Privacy Policy

Operational Support & Connectivity

Subprocessor Entity	Purpose of Processing	Data Privacy Terms
Files.com	Secure file transfer and storage.	View Privacy Policy
Smarty	Address verification services.	View Privacy Policy
Accurate Append	Data enrichment and verification.	View Privacy Policy
Five9	Enrollment support contact center.	View DPA
Verint	Customer experience management.	View DPA
Zapier	Automated workflow integration.	View DPA