...
AWS (RBI guest database)
Snowflake (RBI reporting)
Datadog (logging)
mParticle (customer data platform)
Customer Braze (customer engagement platform - if this system is contracted by the Franchisee)
Amplitude - if this system is contracted by the Franchisee
Branch (deep links) - if this system is contracted by the FranchiseePayment service providers - however, we are still investigating (a) whether PSP’s are in scope for data deletion and (b) if “yes” who is responsible for the deletion
Backups
Note: Forter is out of scope for Privacy Rights because it would interfere with their ability to detect fraud. They have a GDPR exemption.