Overview
NDM Outsourcing Corporation (“NDMOC”) engages selected third-party and affiliated subprocessors to support its operations, compliance, and client service infrastructure.
These subprocessors perform specialized functions such as communication, data hosting, creative production, workforce monitoring, and background verification. Each subprocessor is carefully assessed and bound by strict data protection, confidentiality, and security standards through written Data Processing Agreements (DPAs) consistent with applicable U.S. privacy regulations and international frameworks including the EU-U.S. Data Privacy Framework (DPF) and GDPR.
This list provides transparency regarding subprocessors currently authorized by NDMOC to process limited personal or operational data in connection with our services.
Current List of Subprocessors
| Name of Subprocessor | Purpose / Description of Processing | Location |
|---|---|---|
| Microsoft Corporation | Productivity suite, cloud email hosting (Microsoft 365), and internal communication via Microsoft Teams | United States |
| HubSpot, Inc. | Customer relationship management (CRM), marketing automation, and client service ticketing | United States |
| ClickUp, Inc. | Project management, workflow automation, and task collaboration | United States |
| Nextiva, Inc. | Cloud-based VoIP and business telephone system for client communication | United States |
| InspireU Platform (Developed by NDM Philippines) | Proprietary internal system for project tracking, team coaching, and performance management | United States / Philippines (Internal NDM infrastructure) |
| Canva Pty Ltd. | Graphic design, creative content development, and marketing materials production | Australia / United States |
| Adobe Inc. | Creative suite tools including Adobe InDesign, Adobe Photoshop, and Adobe Illustrator for marketing and publishing design | United States |
| NordVPN S.A. | Virtual Private Network (VPN) service for encrypted data transmission and enhanced network security | Panama / United States |
| CIBI Information, Inc. | Employee background and credit verification for employment screening | Philippines |
| Quantech Solutions OPC | Time tracking, payroll, and productivity monitoring platform for workforce management | Philippines |
| Checkr, Inc. | Employment background checks and verification services | United States |
Data Protection and Compliance
NDMOC ensures that all subprocessors:
- Process data only for legitimate and documented purposes directly related to NDMOC operations and services.
- Implement strong technical and organizational measures to safeguard confidentiality, integrity, and availability of data.
- Comply with U.S. privacy regulations, including CCPA and relevant state laws, and international frameworks such as GDPR and DPF.
- Execute Data Processing Agreements (DPAs) aligned with NDMOC’s internal security and compliance requirements.
NDMOC remains fully accountable for the actions of its subprocessors and regularly reviews their compliance performance.
Notification and Approval Policy
To maintain transparency and trust, NDM Outsourcing Corporation follows a formal Notification and Approval Policy for engaging new subprocessors or making changes to existing ones.
Prior to authorizing any subprocessor to process client or employee data:
- Internal Review: Each proposed subprocessor undergoes a data protection and security assessment by NDMOC’s Data Protection Officer.
- Client Notification: Clients are notified at least 30 days prior to the effective date of a new subprocessor engagement.
- Client Approval: Where required under specific agreements, NDMOC seeks written approval from clients before granting data access.
- Public Disclosure: Updates to this list are promptly published with an updated “Last Updated” date.
Clients may request to receive subprocessor update notifications by contacting privacy@ndmoc.com.
Changes to This List
NDMOC may update this list periodically as subprocessors are added, replaced, or removed to improve service delivery and compliance.
All updates will be communicated per the Notification and Approval Policy above.