Third-Party Services & Subprocessors Disclosure

Purpose of This Disclosure

This Third-Party Services & Subprocessors Disclosure explains how Black Manta Data Analytics (“the Firm”) engages third-party service providers and subprocessors in the delivery, operation, and support of its data analytics, artificial intelligence, software engineering, and related services. This disclosure is intended to provide transparency regarding the role of third parties while clarifying responsibilities and limitations.

Scope of Third-Party Involvement

The Firm may utilize third-party services to support infrastructure, development, analytics processing, collaboration, security, hosting, monitoring, and operational functionality. These third parties may process data on behalf of the Firm solely to the extent necessary to perform contracted services.

This disclosure applies to third-party services used in connection with client engagements, internal operations, and website functionality. It does not apply to third parties independently selected or controlled by clients.

Categories of Third-Party Services

Third-party services may include, but are not limited to, cloud infrastructure providers, data storage platforms, analytics tools, development frameworks, collaboration systems, monitoring services, and security-related technologies. Specific providers may change over time based on operational, technical, or security considerations.

Purpose Limitation and Use of Data

Third-party services and subprocessors are engaged only for defined, limited purposes that support the Firm’s services. Data is processed strictly in accordance with documented instructions, contractual obligations, and applicable data protection requirements.

Third parties are not authorized to use client data for their own purposes.

Security and Due Diligence

The Firm applies reasonable due diligence when selecting third-party service providers, including assessment of security practices, access controls, and operational safeguards. Where applicable, contractual measures are used to require confidentiality, data protection, and appropriate security standards.

Data Location and Transfers

Depending on the nature of the service, data processed by third parties may be stored or accessed in different geographic regions. The Firm seeks to align data handling practices with applicable data protection obligations but does not guarantee specific data residency unless contractually agreed.

Client Responsibility

Clients are responsible for understanding and approving third-party tools or platforms that are explicitly requested, mandated, or integrated at the client’s direction. The Firm is not responsible for third-party services independently selected or controlled by clients.

No Guarantee of Third-Party Performance

The Firm does not warrant or guarantee the performance, availability, or uninterrupted operation of third-party services. Limitations, outages, or changes introduced by third parties may impact service delivery.

Subprocessor Changes

The Firm reserves the right to add, remove, or replace third-party services or subprocessors as operational needs evolve. Such changes do not alter the Firm’s obligations under applicable agreements unless expressly stated.

Exclusions

This disclosure does not cover third-party services that operate independently of the Firm’s control, including external websites, client-owned systems, or services accessed directly by clients without the Firm’s involvement.

Updates to This Disclosure

This Third-Party Services & Subprocessors Disclosure may be updated periodically to reflect changes in technology, vendors, or operational practices. Updated versions replace prior disclosures upon publication.

Contact

Questions regarding third-party services or subprocessors may be directed to the Firm through its designated legal, compliance, or data governance contact channels.