At Mediaocean, we have implemented a Vendor Management policy to ensure that:

• Vendors have applied appropriate technical and organizational measures to protect any data, software or resources entrusted to them in accordance with contractual agreements and applicable laws, and
• We have applied any controls or security measures which the vendor has identified as necessary to protect the data, software or resources that have been entrusted to them.

This policy includes conducting risk assessments to identify security requirements to be met by the vendor, ensuring these requirements are covered in our agreement with the vendor, and obtaining confirmation at least annually that the security requirements continue to be met.

We have documented all the vendors who act as sub-processors and help Mediaocean to process client data, including personal data, in accordance with our clients’ instructions. We commit to giving clients at least 30 days’ notice if we plan to start using a new vendor in the delivery of our contracted services. Please make sure you follow this page to receive email notifications of any changes.

Click here for details 

Update: We updated our sub-processor list on 20 May 2025 to include CyrusOne, which will be replacing Kyndryl Sterling Forest services throughout the year. CyrusOne will provide replication and hosting services.

This change will take effect no sooner than 30 days from this notice. If you wish to object to this change, please contact us in writing within this period.