Yes. If necessary, subcontractors, sub-processors or sub-service organizations may have access to, receive of process client scoped data.
Yes, we do subcontract our cloud hosting services. A full list can be found under our GDPR Page.