Sub-Processor Update FAQ

Who is Ethena? 

Ethena is a new content provider on the Go1 Platform. 

Ethena has been carefully selected as a content provider for the Go1 Platform based on the quality and relevance of their training programs. Their content covers critical workplace topics, including: 

• Preventing harassment and discrimination 
• Cybersecurity, data privacy, and HIPAA 
• Compliance and code of conduct 
• Diversity, equity, inclusion, and unconscious bias 
• Workplace health and safety 
• Management and leadership skills 

These courses are highly valued by many of our customers for supporting compliance and promoting a safe, inclusive, and productive workplace. 

What does this mean for Customers? 

In short, more high-quality content in the Go1 library — with no disruption to your current experience.  

Please note that maintaining an objection will mean your end users won’t have access to any of Ethena’s content on the platform.  

What data will be shared with Ethena? 

We share only the minimum necessary personal data—specifically: 

• first name, 
• last name, and  
• email address. 

When will End User data be shared? 

When an end user accesses a course provided by Ethena. This is solely for the purpose of generating a certificate of completion and supporting user progress tracking within the course. If your End Users do not engage with Ethena Courses, then no data will be shared with them. 

Is the Content Provider contractually bound to protect the data? 

Yes. They are subject to strict contractual obligations under Go1’s Data Processing Agreement, which requires them to implement appropriate technical and organizational measures to protect personal data. 

Has Go1 conducted a Security Review? 

Go1 completes security assessments for all subprocessors. Ethena has undergone an independent audit and is SOC 2 Type II certified, which, like Go1’s own ISO 27001 certification, demonstrates a mature and robust security program. Both certifications reflect rigorous, ongoing controls for the secure handling, storage, and processing of personal data. 

Where is the data stored and processed? 

While Ethena does store data in the United States, we have ensured that appropriate safeguards are in place under Article 46 of the GDPR, including: 

1. A Data Processing Agreement incorporating the European Commission’s Standard Contractual Clauses (SCCs) and requiring the sub-processor to implement appropriate technical and organisational measures to protect personal data. 
2. Go1 has conducted a security assessment of Ethena’s data handling practices as part of our onboarding process. 

Who can I contact for more information? 

If you have specific concerns, please raise them to [email protected]. 

You can always check out our full sub-processor list here: www.go1.com/terms/dpa