Contentsquare Sub-processors List
Unless otherwise defined herein, capitalized terms will have the meaning given to them in the Contentsquare Master Service Agreement.
The Sub-processors List (the “List”) below outlines Contentsquare’s current Affiliates and third-party sub-processors (“Sub-processors”) who are authorized to process Personal Data on behalf of Customers and in connection with CS Service.
All products - Experience Analytics - Product Analytics - Voice of Customer
All Products
Affiliate Sub-processors
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Content Square SAS | Support, Maintenance, Professional Services
| Visitor, Usage | Paris, France |
Content Square, Inc. | Support, Maintenance, Professional Services
| Visitor, Usage | New York, USA |
Content Square Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | London, UK |
Content Square Israel Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | Tel Aviv, Israel |
Content Square Singapore PTE | Support, Professional Services
| Visitor, Usage | Singapore |
Content Square Spain, S.L. | Professional Services
| Visitor, Usage | Madrid, Spain |
Content Square GmbH | Professional Services
| Visitor, Usage | Frankfurt, Germany |
Contentsquare Japan G.K. | Professional Services
| Visitor, Usage | Tokyo, Japan |
ContentSquare DXA SAAS Solutions LLC | Professional Services
| Visitor, Usage | Dubai, UAE |
ContentSquare Italy S.r.l. | Support, Professional Services
| Visitor, Usage | Milan, Italy |
ContentSquare Egypt | Support, Professional Services
| Visitor, Usage | Cairo, Egypt |
Content Square Canada | Professional Services
| Visitor, Usage | Toronto, Canada |
Hotjar Germany GmbH | Support, Maintenance, Professional Services | Visitor, Usage | Berlin, Germany |
Hotjar UK Limited | Support, Maintenance, Professional Services | Visitor, Usage | London, UK |
Hotjar Netherlands BV | Support, Maintenance, Professional Services | Visitor, Usage | Amsterdam, Netherlands |
Hotjar Web Portugal, Unipessoal LDA | Support, Maintenance, Professional Services | Visitor, Usage | Porto Salvo, Portugal |
Hotjar Web Services Spain S.L. | Support, Maintenance, Professional Services | Visitor, Usage | Barcelona, Spain |
2. Third-party Sub-processors
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Atlassian Pty Ltd (Jira) | Customer support and ticketing services | Visitor, Usage, Participants | Sydney, Australia |
Zendesk, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | San Francisco, USA |
Ada Support, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | Toronto, Canada |
Experience Analytics
(formerly titled “CS Digital” and “CS Apps”)
Cloud Storage Sub-processors
These Sub-processors are used by our Experience Analytics Solution to provide data hosting:
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for the following plans: Enterprise & Pro and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) |
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (AWS-EU-West-1) |
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Microsoft Azure | Data hosting for the following plans: Enterprise & Pro and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) |
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (Azure-North Europe) |
*Note: Unless instructed otherwise by the Customer, the default storage location for our Customers’ Visitor Data is the following:
US-based Customers’ Visitor Data is stored in the US,
EU-based & Japan-based Customers’ Visitor Data is stored in the EU, and
APJ-based Customers’ Visitor Data is stored in the US, except for our Japan-based Customers.
2. Additional Sub-processors involved in specific features
2.1 Client-facing Adoption Dashboard
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Usage | Europe: Ireland (AWS-EU-West-1) |
Salesforce.com France, S.A.S. (Tableau) | Dashboard Reporting platform for usage adoption of Experience Analytics
| Usage | France For more information about Salesforce’s data center locations for Tableau, visit this link |
2.2 User Lifecycle Extension (formerly titled Product Analytics Extension to Experience Analytics)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | USA: Virginia, USA (AWS-US-East-1) |
See “Product Analytics” section below for further sub-processors utilized for this feature |
2.3 Data Connect (also titled as “Data Connect for Experience Analytics”, formerly titled “DXA Data Connect”)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for Data Connect | Visitor | USA: Virginia, USA (AWS-US-East-1) |
Snowflake | Data hosting for CSQ-hosted Snowflake (formerly “Heap-hosted Snowflake”) and Data hosting and transfer to Customer’s Snowflake data warehouse | Visitor | Customer’s Snowflake warehouse location For more information about our supported Snowflake data center locations, visit this link. |
2.4 Session Replay Summaries
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services Bedrock Anthropic Service | Data hosting for Session Replay Summaries feature for the following plans:
Enterprise & Pro | Visitor | Europe: Ireland (AWS-EU-West-1)
or
USA: Virginia, USA (AWS-US-East-1) |
Microsoft Azure OpenAI Service | Data hosting for Session Replay Summaries feature for the following plans:
Enterprise & Pro | Visitor | Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) |
3. Professional Services Sub-processors (opt-in only)
These Sub-processors are used to provide Support, Maintenance, and Professional Services:
Name | Type of Data | Location |
|---|---|---|
Atoms - Retex | Visitor | Milan, Italy |
Cardinal Path LLC | Visitor | Illinois, USA |
Converteo SAS | Visitor | Paris, France |
Dentsu Manchester Limited | Visitor | Manchester, UK |
Group Onepoint SAS | Visitor | Paris, France |
Level Access, Inc. | Visitor | Virginia, USA |
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India |
Temesis SAS | Visitor | Paris, France |
Up Reply GmbH | Visitor | Munich, Germany |
Zilker Trail Consulting | Visitor | Texas, USA |
Product Analytics
(formerly titled “Heap Platform” and “Activate”)
Cloud Storage Sub-processor
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Customer may select either: Europe: Ireland (AWS-EU-West-1),
Frankfurt, Germany (AWS EU-Central-1) (at-rest only),, or USA: Virginia, USA (AWS-US-East-1) |
2. Additional Sub-processors involved in specific features
2.1 Connect (also titled “PA Connect”) (formerly titled “Heap Connect”)
Name | Type of Services | Type of Data | Location |
|---|---|---|---|
Snowflake | Data hosting for CSQ-hosted Snowflake (formerly “Heap-Hosted Snowflake”)
Data access to analytics and reports of Customer Data in their Snowflake instance (“Snowflake integration”) | Visitor | Customer’s Snowflake warehouse location
For more information about our supported Snowflake data center locations, visit this link. |
2.2 Chat for Product Analytics (formerly titled “Heap AI CoPilot”)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services (AWS) | Hosting of the Heap AI and Customer Data and backups | Visitor | USA: Virginia, USA (AWS-US-East-1) |
OpenAI | Provides large language model | Visitor | San Francisco, USA |
3. Professional Services Sub-processors (opt-in only)
Name | Type of Data | Location |
|---|---|---|
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India |
Voice-of-Customer
Surveys & Feedback Sub-processors (formerly titled “Ask” and “Observe”)
Name | Type of Services | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Europe: Ireland (AWS-EU-West-1) |
2. User Tests & Interviews Sub-processors (formerly titled “Engage”)
Name | Feature | Purpose | Type of Data | Location |
|---|---|---|---|---|
Daily.co | User Tests feature
| Hosting of recordings* | Participants | Europe: Ireland (AWS-EU-West-1)* |
| Hosting of name and duration of test | Participants | USA: Oregon, USA (AWS-US-West-2)* | |
Twilio Inc. | User Interviews feature | Data hosting
| Participants | Dublin, Ireland |
Postmark | User Tests and User Interviews features | Email delivery service | Participants | Chicago, USA |
*Calls are hosted according to the tester’s geographic location, see more information here. 3. Additional Sub-processors involved in specific features
3.1 Hotjar AI for Surveys
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Microsoft, Azure OpenAI Service | Provides Large Language Model (LLM) | Visitor | San Francisco, USA |
Following an internal assessment, we identified that some of the vendors listed above were not included in our previous list; Contentsquare has always used these vendors for the identified purpose, they are not new sub-processors.
SUBSCRIBING TO UPDATES TO THE SUB-PROCESSOR LIST
To subscribe to receive updates concerning new Sub-processors that will be added to this List, please use this Request Form or send an email to privacy@contentsquare.com.
REQUESTING MORE INFORMATION ABOUT A SUB-PROCESSOR
For any additional information concerning Contentsquare’s data processing practices or any specific Sub-processors, please send an email to privacy@contentsquare.com identifying the Sub-processor and the requested information.
OBJECTING TO A SUB-PROCESSOR
A Customer (in its role as Data Controller) may object to Contentsquare use of a specific Sub-processor in accordance with the terms of the Data Processing Agreement governing the relations between the parties. Such objection may be sent by email to privacy@contentsquare.com (subject line “Sub-processor Objection”) containing the following information:
Customer Entity Name
Sub-processor Entity Name
Grounds for Objection
Requestor Name
Requestor Email
Objections must be based on legitimate data protection grounds in accordance with the terms of Contentsquare’s standard Data Processing Agreement.
Contentsquare Sub-processors List
Unless otherwise defined herein, capitalized terms will have the meaning given to them in the Contentsquare Master Service Agreement.
The Sub-processors List (the “List”) below outlines Contentsquare’s current Affiliates and third-party sub-processors (“Sub-processors”) who are authorized to process Personal Data on behalf of Customers and in connection with CS Service.
All Products
Affiliate Sub-processors
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Content Square SAS | Support, Maintenance, Professional Services
| Visitor, Usage | Paris, France |
Content Square, Inc. | Support, Maintenance, Professional Services
| Visitor, Usage | New York, USA |
Content Square Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | London, UK |
Content Square Israel Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | Tel Aviv, Israel |
Content Square Singapore PTE | Support, Professional Services
| Visitor, Usage | Singapore |
Content Square Spain, S.L. | Professional Services
| Visitor, Usage | Madrid, Spain |
Content Square GmbH | Professional Services
| Visitor, Usage | Frankfurt, Germany |
Contentsquare Japan G.K. | Professional Services
| Visitor, Usage | Tokyo, Japan |
ContentSquare DXA SAAS Solutions LLC | Professional Services
| Visitor, Usage | Dubai, UAE |
ContentSquare Italy S.r.l. | Support, Professional Services
| Visitor, Usage | Milan, Italy |
ContentSquare Egypt | Support, Professional Services
| Visitor, Usage | Cairo, Egypt |
Content Square Canada | Professional Services
| Visitor, Usage | Toronto, Canada |
Hotjar Germany GmbH | Support, Maintenance, Professional Services | Visitor, Usage | Berlin, Germany |
Hotjar UK Limited | Support, Maintenance, Professional Services | Visitor, Usage | London, UK |
Hotjar Netherlands BV | Support, Maintenance, Professional Services | Visitor, Usage | Amsterdam, Netherlands |
Hotjar Web Portugal, Unipessoal LDA | Support, Maintenance, Professional Services | Visitor, Usage | Porto Salvo, Portugal |
Hotjar Web Services Spain S.L. | Support, Maintenance, Professional Services | Visitor, Usage | Barcelona, Spain |
2. Third-party Sub-processors
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Atlassian Pty Ltd (Jira) | Customer support and ticketing services | Visitor, Usage, Participants | Sydney, Australia |
Zendesk, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | San Francisco, USA |
Ada Support, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | Toronto, Canada |
Experience Analytics
(formerly titled “CS Digital” and “CS Apps”)
Cloud Storage Sub-processors
These Sub-processors are used by our Experience Analytics Solution to provide data hosting:
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for the following plans: Enterprise & Pro and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) |
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (AWS-EU-West-1) |
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Microsoft Azure | Data hosting for the following plans: Enterprise & Pro and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) |
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (Azure-North Europe) |
*Note: Unless instructed otherwise by the Customer, the default storage location for our Customers’ Visitor Data is the following:
US-based Customers’ Visitor Data is stored in the US,
EU-based & Japan-based Customers’ Visitor Data is stored in the EU, and
APJ-based Customers’ Visitor Data is stored in the US, except for our Japan-based Customers.
2. Additional Sub-processors involved in specific features
2.1 Client-facing Adoption Dashboard
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Usage | Europe: Ireland (AWS-EU-West-1) |
Salesforce.com France, S.A.S. (Tableau) | Dashboard Reporting platform for usage adoption of Experience Analytics
| Usage | France For more information about Salesforce’s data center locations for Tableau, visit this link |
2.2 User Lifecycle Extension (formerly titled Product Analytics Extension to Experience Analytics)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | USA: Virginia, USA (AWS-US-East-1) |
See “Product Analytics” section below for further sub-processors utilized for this feature |
2.3 Data Connect (also titled as “Data Connect for Experience Analytics”, formerly titled “DXA Data Connect”)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for Data Connect | Visitor | USA: Virginia, USA (AWS-US-East-1) |
Snowflake | Data hosting for CSQ-hosted Snowflake (formerly “Heap-hosted Snowflake”) and Data hosting and transfer to Customer’s Snowflake data warehouse | Visitor | Customer’s Snowflake warehouse location For more information about our supported Snowflake data center locations, visit this link. |
2.4 Session Replay Summaries
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services Bedrock Anthropic Service | Data hosting for Session Replay Summaries feature for the following plans:
Enterprise & Pro | Visitor | Europe: Ireland (AWS-EU-West-1)
or
USA: Virginia, USA (AWS-US-East-1) |
Microsoft Azure OpenAI Service | Data hosting for Session Replay Summaries feature for the following plans:
Enterprise & Pro | Visitor | Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) |
3. Professional Services Sub-processors (opt-in only)
These Sub-processors are used to provide Support, Maintenance, and Professional Services:
Name | Type of Data | Location |
|---|---|---|
Atoms - Retex | Visitor | Milan, Italy |
Cardinal Path LLC | Visitor | Illinois, USA |
Converteo SAS | Visitor | Paris, France |
Dentsu Manchester Limited | Visitor | Manchester, UK |
Group Onepoint SAS | Visitor | Paris, France |
Level Access, Inc. | Visitor | Virginia, USA |
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India |
Temesis SAS | Visitor | Paris, France |
Up Reply GmbH | Visitor | Munich, Germany |
Zilker Trail Consulting | Visitor | Texas, USA |
Product Analytics
(formerly titled “Heap Platform” and “Activate”)
Cloud Storage Sub-processor
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Customer may select either: Europe: Ireland (AWS-EU-West-1),
Frankfurt, Germany (AWS EU-Central-1) (at-rest only),, or USA: Virginia, USA (AWS-US-East-1) |
2. Additional Sub-processors involved in specific features
2.1 Connect (also titled “PA Connect”) (formerly titled “Heap Connect”)
Name | Type of Services | Type of Data | Location |
|---|---|---|---|
Snowflake | Data hosting for CSQ-hosted Snowflake (formerly “Heap-Hosted Snowflake”)
Data access to analytics and reports of Customer Data in their Snowflake instance (“Snowflake integration”) | Visitor | Customer’s Snowflake warehouse location
For more information about our supported Snowflake data center locations, visit this link. |
2.2 Chat for Product Analytics (formerly titled “Heap AI CoPilot”)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services (AWS) | Hosting of the Heap AI and Customer Data and backups | Visitor | USA: Virginia, USA (AWS-US-East-1) |
OpenAI | Provides large language model | Visitor | San Francisco, USA |
3. Professional Services Sub-processors (opt-in only)
Name | Type of Data | Location |
|---|---|---|
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India |
Voice-of-Customer
Surveys & Feedback Sub-processors (formerly titled “Ask” and “Observe”)
Name | Type of Services | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Europe: Ireland (AWS-EU-West-1) |
2. User Tests & Interviews Sub-processors (formerly titled “Engage”)
Name | Feature | Purpose | Type of Data | Location |
|---|---|---|---|---|
Daily.co | User Tests feature
| Hosting of recordings* | Participants | Europe: Ireland (AWS-EU-West-1)* |
| Hosting of name and duration of test | Participants | USA: Oregon, USA (AWS-US-West-2)* | |
Twilio Inc. | User Interviews feature | Data hosting
| Participants | Dublin, Ireland |
Postmark | User Tests and User Interviews features | Email delivery service | Participants | Chicago, USA |
*Calls are hosted according to the tester’s geographic location, see more information here. 3. Additional Sub-processors involved in specific features
3.1 Hotjar AI for Surveys
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Microsoft, Azure OpenAI Service | Provides Large Language Model (LLM) | Visitor | San Francisco, USA |
Following an internal assessment, we identified that some of the vendors listed above were not included in our previous list; Contentsquare has always used these vendors for the identified purpose, they are not new sub-processors.
SUBSCRIBING TO UPDATES TO THE SUB-PROCESSOR LIST
To subscribe to receive updates concerning new Sub-processors that will be added to this List, please use this Request Form or send an email to privacy@contentsquare.com.
REQUESTING MORE INFORMATION ABOUT A SUB-PROCESSOR
For any additional information concerning Contentsquare’s data processing practices or any specific Sub-processors, please send an email to privacy@contentsquare.com identifying the Sub-processor and the requested information.
OBJECTING TO A SUB-PROCESSOR
A Customer (in its role as Data Controller) may object to Contentsquare use of a specific Sub-processor in accordance with the terms of the Data Processing Agreement governing the relations between the parties. Such objection may be sent by email to privacy@contentsquare.com (subject line “Sub-processor Objection”) containing the following information:
Customer Entity Name
Sub-processor Entity Name
Grounds for Objection
Requestor Name
Requestor Email
Objections must be based on legitimate data protection grounds in accordance with the terms of Contentsquare’s standard Data Processing Agreement.