All Products
1. Affiliate Sub-processors
Name | Purpose | Type of Data | Location | Transfer Mechanisms |
|---|---|---|---|---|
Content Square SAS | Support, Maintenance, Professional Services
| Visitor, Usage | Paris, France | Intercompany SCCs |
Content Square, Inc. | Support, Maintenance, Professional Services
| Visitor, Usage | New York, USA | Intercompany SCCs DPF |
Content Square Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | London, UK | Intercompany SCCs |
Content Square Israel Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | Tel Aviv, Israel | Adequacy decision Intercompany SCCs |
Content Square Singapore PTE | Support, Professional Services
| Visitor, Usage | Singapore | Adequacy decision Intercompany SCCs |
Content Square Spain, S.L. | Professional Services
| Visitor, Usage | Madrid, Spain | Intercompany SCCs |
Content Square GmbH | Professional Services
| Visitor, Usage | Frankfurt, Germany | Intercompany SCCs |
Contentsquare Japan G.K. | Professional Services
| Visitor, Usage | Tokyo, Japan | Adequacy decision Intercompany SCCs |
ContentSquare DXA SAAS Solutions LLC | Professional Services
| Visitor, Usage | Dubai, UAE | Intercompany SCCs |
ContentSquare Italy S.r.l. | Support, Professional Services
| Visitor, Usage | Milan, Italy | Intercompany SCCs |
ContentSquare Egypt | Support, Professional Services
| Visitor, Usage | Cairo, Egypt | Intercompany SCCs |
Content Square Canada | Professional Services
| Visitor, Usage | Toronto, Canada | Adequacy decision Intercompany SCCs |
Hotjar Germany GmbH | Support, Maintenance, Professional Services | Visitor, Usage | Berlin, Germany | Intercompany SCCs |
Hotjar UK Limited | Support, Maintenance, Professional Services | Visitor, Usage | London, UK | Intercompany SCCs |
Hotjar Netherlands BV | Support, Maintenance, Professional Services | Visitor, Usage | Amsterdam, Netherlands | Intercompany SCCs |
Hotjar Web Portugal, Unipessoal LDA | Support, Maintenance, Professional Services | Visitor, Usage | Porto Salvo, Portugal | Intercompany SCCs |
Hotjar Web Services Spain S.L. | Support, Maintenance, Professional Services | Visitor, Usage | Barcelona, Spain | Intercompany SCCs |
Loris Technologies, Ltd. | Support, Maintenance, Professional Services and conversational intelligence services | Service Agent, End-User | Tel Aviv, Israel | Adequacy decision Intercompany SCCs |
2. Third-party Sub-processors
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Atlassian Pty Ltd (Jira) | Customer support and ticketing services | Visitor, Usage, Participants | Sydney, Australia | SCCs DPF |
Zendesk, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | San Francisco, USA | SCCs DPF |
Ada Support, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | Toronto, Canada | Adequacy decision SCCs |
3. Professional Services Sub-processors (OPT-IN ONLY)
These Sub-processors are used to provide Support, Maintenance, and Professional Services:
Name | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|
Atoms - Retex | Visitor | Milan, Italy | N/A |
Cardinal Path LLC | Visitor | Illinois, USA | SCCs |
Converteo SAS | Visitor | Paris, France | N/A |
Dentsu Manchester Limited | Visitor | Manchester, UK | UK SCCs |
Group Onepoint SAS | Visitor | Paris, France | N/A |
Level Access, Inc. | Visitor | Virginia, USA | SCCs |
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India | SCCs |
Temesis SAS | Visitor | Paris, France | N/A |
Up Reply GmbH | Visitor | Munich, Germany | N/A |
Zilker Trail Consulting | Visitor | Texas, USA | SCCs |
Experience Analytics
(formerly titled “CS Digital” and “CS Apps”)
Cloud Storage Sub-processors
These Sub-processors are used by our Experience Analytics Solution to provide data hosting:
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for the following plans: Pro & Enterprise and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs
|
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (AWS-EU-West-1) | DPF SCCs
|
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Microsoft Azure | Data hosting for the following plans: Pro & Enterprise and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) |
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (Azure-North Europe) |
*Note: Unless instructed otherwise by the Customer, the default storage location for our Customers’ Visitor Data is the following:
US-based Customers’ Visitor Data is stored in the US,
EU-based & Japan-based Customers’ Visitor Data is stored in the EU, and
APJ-based Customers’ Visitor Data is stored in the US, except for our Japan-based Customers.
2. Additional Sub-processors involved in specific features
2.1 User Lifecycle Extension (formerly titled Product Analytics Extension to Experience Analytics)
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Data is hosted in the same region selected by Customer under Section 1 above: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
See “Product Analytics” section below for further sub-processors utilized for this feature |
2.2 Data Connect (also titled as “Data Connect for Experience Analytics”, formerly titled “DXA Data Connect”)
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for Data Connect | Visitor | Based on the location of the Customer:
Europe: Frankfurt, Germany (AWS-EU-Central-1)
or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
2.3 Sense AI Features including Sense Chat, Error Summaries, Mapping Assistant, and Session Replay Summaries
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services Bedrock | Provides Large Language Model (LLM) for the following plans: Growth, Pro, and Enterprise | Visitor | Based on the location of the Customer, LLM is served from: Europe: Ireland (AWS-EU-West-1), United Kingdom (AWS-EU-West-2), France (AWS-EU-West-3), Germany (AWS-EU-Central-1), Sweden (AWS-EU-North-1), Italy (AWS-EU-South-1), or Spain (AWS-EU-South-2), or USA: Virginia, USA (AWS-US-East-1), Ohio, USA (AWS-US-East-2), or Oregon, USA (AWS-US-West-2) | DPF SCCs |
Microsoft Corporation (Azure) | Provides Large Language Model (LLM) for the following plans: Growth, Pro, and Enterprise | Visitor | Based on the location of the Customer, LLM is served from: Europe or USA | DPF SCCs |
Product Analytics
(formerly titled “Heap Platform” and “Activate”)
Cloud Storage Sub-processor
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Customer may select either: Europe: Ireland (AWS-EU-West-1), Frankfurt, Germany (AWS EU-Central-1) (at-rest only),, or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
2. Additional Sub-processors involved in specific features
2.1 Connect (also titled “PA Connect”) (formerly titled “Heap Connect”)
Name | Type of Services | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for Data Connect | Visitor | Data is hosted in the same region selected by Customer under Section 1 above:
Europe: Ireland (AWS-EU-West-1),
Frankfurt, Germany (AWS EU-Central-1) (at-rest only), or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
2.2 Sense Chat (formerly titled “Heap AI CoPilot” or “Chat for Product Analytics”)
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services (AWS) | Hosting of Sense Chat and Customer Data and backups | Visitor | Data is hosted in the same region selected by Customer under Section 1 above: Europe: Ireland (AWS-EU-West-1), or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
OpenAI OpCo, LLC | Provides Large Language Model (LLM) | Visitor | LLM is served in the same region selected by Customer under Section 1 above: Europe or USA | SCCs |
Voice-of-Customer
Surveys & Feedback (formerly titled “Ask”) and Observe Sub-processors
Name | Type of Services | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Europe: Ireland (AWS-EU-West-1) | DPF SCCs |
2. User Tests & Interviews Sub-processors (formerly titled “Engage”)
Name | Feature | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|---|
Daily.co | User Tests feature
| Hosting of recordings* | Participants | Europe: Ireland (AWS-EU-West-1)* | DPF SCCs |
| Hosting of name and duration of test | Participants | USA: Oregon, USA (AWS-US-West-2)* | DPF SCCs | |
Twilio Inc. | User Interviews feature | Data hosting
| Participants | Dublin, Ireland | N/A |
Postmark | User Tests and User Interviews features | Email delivery service | Participants | Chicago, USA | DPF SCCs |
Tremendous, LLC | User Tests and User Interviews features | Participant rewards provider | Participants | New York, USA | DPF |
*Calls are hosted according to the tester’s geographic location, see more information here.
3. Additional Sub-processors involved in specific features
3.1 Hotjar AI for Surveys
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Microsoft Corporation, (Azure OpenAI Service) | Provides Large Language Model (LLM) | Visitor | France | DPF SCCs |
Conversation Intelligence
(formerly titled “Loris VOC Insights”)
1. Cloud Storage Sub-processors
This Sub-processor is used by our Loris AI Solution to provide data hosting:
Name | Type of Services | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Agent, Requestor | Customer may select either:
USA: Ohio, USA (AWS-US-East-2)
EU: Ireland (AWS-EU-West-1) | DPF SCCs |
2. Third-party Sub-processors
Name | Type of Services | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Microsoft Corporation (Azure) | Provides Large Language Model (LLM) | Agent, Requestor | Based on capacity, LLM is served from: Australia: New South Wales (Azure-Australia East) or Europe: France (Azure- France Central), Germany (Azure-Germany West Central), Italy (Azure-Italy North) Netherlands (Azure-West Europe), Norway (Azure-Norway East), Sweden (Azure-Sweden Central), Switzerland (Azure-Switzerland North), or United Kingdom (Azure-UK South) or North America: Arizona, USA (Azure-West US 3), California, USA (Azure-West US), Canada (Azure-Canada East), Illinois, USA (Azure-North Central US), Texas, USA (Azure-South Central US), Virginia, USA (Azure-East US), or Virginia, USA (Azure-East US 2) or Asia: Japan (Azure-Japan East), or India (Azure-South India) | DPF SCCs |
Deepgram, Inc. | Speech-to-text services | Agent, Requestor | San Francisco, USA | SCCs |
Snowflake Inc. | Data warehouse | Agent, Requestor | USA: Ohio, USA (AWS-US-East-2) | DPF SCCs |
Salesforce, Inc. | Tableau Dashboard reporting feature | Agent | San Francisco, USA | DPF SCCs |
Turbopuffer Inc. | Vector database search and index service | Agent, Requestor | USA: Ohio, USA (AWS-US-East-2) | SCCs |
Following an internal assessment, we identified that some of the vendors listed above were not included in our previous list; Contentsquare has always used these vendors for the identified purpose, they are not new sub-processors.
SUBSCRIBING TO UPDATES TO THE SUB-PROCESSOR LIST
To subscribe to receive updates concerning new Sub-processors that will be added to this List, please use this Request Form or send an email to [email protected].
REQUESTING MORE INFORMATION ABOUT A SUB-PROCESSOR
For any additional information concerning Contentsquare’s data processing practices or any specific Sub-processors, please send an email to [email protected] identifying the Sub-processor and the requested information.
OBJECTING TO A SUB-PROCESSOR
A Customer (in its role as Data Controller) may object to Contentsquare use of a specific Sub-processor in accordance with the terms of the Data Processing Agreement governing the relations between the parties. Such objection may be sent by email to [email protected] (subject line “Sub-processor Objection”) containing the following information:
Customer Entity Name
Sub-processor Entity Name
Grounds for Objection
Requestor Name
Requestor Email
Objections must be based on legitimate data protection grounds in accordance with the terms of Contentsquare’s standard Data Processing Agreement.