Last Updated: April 2026
The following list identifies third-party sub-processors that Boston Consulting Group (“BCG”) may utilize to process personal data on its behalf when BCG is processing personal data on behalf of its clients in connection with BCG’s services. The third-party sub-processors that BCG will use will depend on the engagement. BCG may leverage other third-party sub-processors that are reflected in the respective client agreement. This list may be updated by BCG from time to time.
Company | Processing Activity | Processing Locations |
| Acuity Knowledge Partners (UK) Limited | Research, analytics, and business intelligence services | India, Costa Rica |
| Alteryx, Inc. | Data analytics | United States |
| Amazon Web Services, Inc. | Cloud hosting/storage | Germany, United States, Singapore |
| Anthropic, PBC | Data analytics | United States |
| Atlassian, Inc. | Project and task management | United States |
| Creatium Inc. | Video-based educational content creation | United States |
| Docebo NA, Inc. | Digital learning program – software services | United States |
| EMEAKOM | Document production services | Morocco |
| Evalueserve Inc. | Business research and document production services | United States |
| Genpact India Private Limited | Technical support | United States, India, Spain, Colombia |
| HubSpot, Inc. | Customer relationship management platform | United States |
| IM Research DMCC (Infomineo) | Research and translation services | Morocco, Egypt |
| Integreon Managed Solutions, Inc. | Document production services | United States |
| Merge API, Inc. | HR systems integration | United States, Sweden |
| Merlin AI, Inc. dba Listen Labs | AI-moderated culture-focused interviews (video, audio, or chat) | United States |
| Microsoft Corporation | Data storage and analysis, and Office solutions, including Outlook, Word, and Excel | Europe (Netherlands, Ireland) for European cases, United States (for NAMR cases), Australia (for Australian cases), South-East Asia (for Asian cases), Mainland China (21Vianet) for export restricted data |
| Mimecast North America, Inc. | Email scanning and filtering | United States |
| Nagarro Inc. | Technical support | United States, India, Mexico |
| NovoEd Inc. | eLearning platform | United States |
| Okta Inc. | Authentication | United States, Ireland, Germany, Australia, Singapore |
| OpenAI OpCo, LLC | Data analytics | United States |
| PCC Poland | Document production services | Poland |
| PixelFaerie Limited | Document production services | South Africa |
| R.R. Donnelley & Sons Company | Document production services | India, United States, Philippines,Sri Lanka |
| Salesforce, Inc. | Data analytics | United States, Australia, Canada, Ireland, Japan, United Kingdom |
| SendThisFile, Inc. | File sharing services | United States |
| Slack Technologies, LLC | Messaging platform | United States, Australia, Canada, France, Germany, India, Japan, South Korea, United Kingdom |
| Snowflake Computing, Inc. | Cloud computing services | United States |
| Stefanini Inc. | IT consulting | United States |
| Tarjama FZ-LLC | Document production and translation services | Dubai |
| TransPerfect Document Management, Inc. | Document production and translation services | United States |
| Verint Systems | Design and execution of surveys, data analytics | United States |
| Williams Lea Inc. | Document production services | United Kingdom |
| WNS Global Services (UK) International Limited | Document production services | India |
| Workera Corp | Adaptive digital learning platform | United States |
| ZADD | Document production and translation services | Lebanon |
| Zoom Video Communications, Inc. | Video and audio conferencing | United States |