Contentsquare Sub-processors List
Unless otherwise defined herein, capitalized terms will have the meaning given to them in the Contentsquare Master Service Agreement.
The Sub-processors List (the “List”) below outlines Contentsquare’s current Affiliates and third-party sub-processors (“Sub-processors”) who are authorized to process Personal Data on behalf of Customers and in connection with CS Service.
Please refer to the relevant section of the table based on the products you have purchased.
All Products
Affiliate Sub-processors
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Content Square SAS | Support, Maintenance, Professional Services
| Visitor, Usage | Paris, France |
Content Square, Inc. | Support, Maintenance, Professional Services
| Visitor, Usage | New York, USA |
Content Square Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | London, UK |
Content Square Israel Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | Tel Aviv, Israel |
Content Square Singapore PTE | Support, Professional Services
| Visitor, Usage | Singapore |
Content Square Spain, S.L. | Professional Services
| Visitor, Usage | Madrid, Spain |
Content Square GmbH | Professional Services
| Visitor, Usage | Frankfurt, Germany |
Contentsquare Japan G.K. | Professional Services
| Visitor, Usage | Tokyo, Japan |
ContentSquare DXA SAAS Solutions LLC | Professional Services
| Visitor, Usage | Dubai, UAE |
ContentSquare Italy S.r.l. | Support, Professional Services
| Visitor, Usage | Milan, Italy |
ContentSquare Egypt | Support, Professional Services
| Visitor, Usage | Cairo, Egypt |
Content Square Canada | Professional Services
| Visitor, Usage | Toronto, Canada |
Hotjar Germany GmbH | Support, Maintenance, Professional Services | Visitor, Usage | Berlin, Germany |
Hotjar UK Limited | Support, Maintenance, Professional Services | Visitor, Usage | London, UK |
Hotjar Netherlands BV | Support, Maintenance, Professional Services | Visitor, Usage | Amsterdam, Netherlands |
Hotjar Web Portugal, Unipessoal LDA | Support, Maintenance, Professional Services | Visitor, Usage | Porto Salvo, Portugal |
Hotjar Web Services Spain S.L. | Support, Maintenance, Professional Services | Visitor, Usage | Barcelona, Spain |
2. Third-party Sub-processors
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Atlassian Pty Ltd (Jira) | Customer support and ticketing services | Visitor, Usage, Participants | Sydney, Australia |
Zendesk, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | San Francisco, USA |
Ada Support, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | Toronto, Canada |
Experience Analytics
(formerly titled “CS Digital” and “CS Apps”)
Cloud Storage Sub-processors
These Sub-processors are used by our Experience Analytics Solution to provide data hosting:
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for the following plans: Pro & Enterprise and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) |
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (AWS-EU-West-1) |
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Microsoft Azure | Data hosting for the following plans: Pro & Enterprise and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) |
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (Azure-North Europe) |
*Note: Unless instructed otherwise by the Customer, the default storage location for our Customers’ Visitor Data is the following:
US-based Customers’ Visitor Data is stored in the US,
EU-based & Japan-based Customers’ Visitor Data is stored in the EU, and
APJ-based Customers’ Visitor Data is stored in the US, except for our Japan-based Customers.
2. Additional Sub-processors involved in specific features
2.1 Client-facing Adoption Dashboard
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Usage | Europe: Ireland (AWS-EU-West-1) |
Salesforce.com France, S.A.S. (Tableau) | Dashboard Reporting platform for usage adoption of Experience Analytics
| Usage | France For more information about Salesforce’s data center locations for Tableau, visit this link |
2.2 User Lifecycle Extension (formerly titled Product Analytics Extension to Experience Analytics)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Data is hosted in the same region selected by Customer under Section 1 above: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) |
See “Product Analytics” section below for further sub-processors utilized for this feature |
2.3 Data Connect (also titled as “Data Connect for Experience Analytics”, formerly titled “DXA Data Connect”)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for Data Connect | Visitor | USA: Virginia, USA (AWS-US-East-1) |
Snowflake | Data hosting for CSQ-hosted Snowflake (formerly “Heap-hosted Snowflake”) and Data hosting and transfer to Customer’s Snowflake data warehouse | Visitor | Customer’s Snowflake warehouse location For more information about our supported Snowflake data center locations within AWS, Azure, or GCP, visit, visit this link. |
2.4 Sense AI Features including Sense Chat, Error Summaries, Mapping Assistant, and Session Replay Summaries
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services Bedrock | Provides Large Language Model (LLM) for the following plans: Growth (Sense Chat feature only), Pro, and Enterprise | Visitor | Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) |
Microsoft Azure | Provides Large Language Model (LLM) for the following plans: Growth (Sense Chat feature only), Pro, and Enterprise | Visitor | Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) |
3. Professional Services Sub-processors (opt-in only)
These Sub-processors are used to provide Support, Maintenance, and Professional Services:
Name | Type of Data | Location |
|---|---|---|
Atoms - Retex | Visitor | Milan, Italy |
Cardinal Path LLC | Visitor | Illinois, USA |
Converteo SAS | Visitor | Paris, France |
Dentsu Manchester Limited | Visitor | Manchester, UK |
Group Onepoint SAS | Visitor | Paris, France |
Level Access, Inc. | Visitor | Virginia, USA |
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India |
Temesis SAS | Visitor | Paris, France |
Up Reply GmbH | Visitor | Munich, Germany |
Zilker Trail Consulting | Visitor | Texas, USA |
Product Analytics
(formerly titled “Heap Platform” and “Activate”)
Cloud Storage Sub-processor
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Customer may select either: Europe: Ireland (AWS-EU-West-1), Frankfurt, Germany (AWS EU-Central-1) (at-rest only),, or USA: Virginia, USA (AWS-US-East-1) |
2. Additional Sub-processors involved in specific features
2.1 Connect (also titled “PA Connect”) (formerly titled “Heap Connect”)
Name | Type of Services | Type of Data | Location |
|---|---|---|---|
Snowflake | Data hosting for CSQ-hosted Snowflake (formerly “Heap-Hosted Snowflake”)
Data access to analytics and reports of Customer Data in their Snowflake instance (“Snowflake integration”) | Visitor | Customer’s Snowflake warehouse location
For more information about our supported Snowflake data center locations within AWS, Azure, or Google Cloud, visit this link. |
2.2 Sense Chat (formerly titled “Heap AI CoPilot” or “Chat for Product Analytics”)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services (AWS) | Hosting of Sense Chat and Customer Data and backups | Visitor | Data is hosted in the same region selected by Customer under Section 1 above: Europe: Ireland (AWS-EU-West-1), or USA: Virginia, USA (AWS-US-East-1) |
OpenAI | Provides Large Language Model (LLM) | Visitor | LLM is served in the same region selected by Customer under Section 1 above: Europe or USA |
3. Professional Services Sub-processors (opt-in only)
Name | Type of Data | Location |
|---|---|---|
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India |
Voice-of-Customer
Surveys & Feedback (formerly titled “Ask”) and Observe Sub-processors
Name | Type of Services | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Europe: Ireland (AWS-EU-West-1) |
2. User Tests & Interviews Sub-processors (formerly titled “Engage”)
Name | Feature | Purpose | Type of Data | Location |
|---|---|---|---|---|
Daily.co | User Tests feature
| Hosting of recordings* | Participants | Europe: Ireland (AWS-EU-West-1)* |
| Hosting of name and duration of test | Participants | USA: Oregon, USA (AWS-US-West-2)* | |
Twilio Inc. | User Interviews feature | Data hosting
| Participants | Dublin, Ireland |
Postmark | User Tests and User Interviews features | Email delivery service | Participants | Chicago, USA |
*Calls are hosted according to the tester’s geographic location, see more information here.
3. Additional Sub-processors involved in specific features
3.1 Hotjar AI for Surveys
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Microsoft, Azure OpenAI Service | Provides Large Language Model (LLM) | Visitor | San Francisco, USA |
Following an internal assessment, we identified that some of the vendors listed above were not included in our previous list; Contentsquare has always used these vendors for the identified purpose, they are not new sub-processors.
SUBSCRIBING TO UPDATES TO THE SUB-PROCESSOR LIST
To subscribe to receive updates concerning new Sub-processors that will be added to this List, please use this Request Form or send an email to privacy@contentsquare.com.
REQUESTING MORE INFORMATION ABOUT A SUB-PROCESSOR
For any additional information concerning Contentsquare’s data processing practices or any specific Sub-processors, please send an email to privacy@contentsquare.com identifying the Sub-processor and the requested information.
OBJECTING TO A SUB-PROCESSOR
A Customer (in its role as Data Controller) may object to Contentsquare use of a specific Sub-processor in accordance with the terms of the Data Processing Agreement governing the relations between the parties. Such objection may be sent by email to privacy@contentsquare.com (subject line “Sub-processor Objection”) containing the following information:
Customer Entity Name
Sub-processor Entity Name
Grounds for Objection
Requestor Name
Requestor Email
Objections must be based on legitimate data protection grounds in accordance with the terms of Contentsquare’s standard Data Processing Agreement.