Contentsquare Sub-processors List
Unless otherwise defined herein, capitalized terms will have the meaning given to them in the Contentsquare Master Service Agreement.
The Sub-processors List (the “List”) below outlines Contentsquare’s current Affiliates and third-party sub-processors (“Sub-processors”) who are authorized to process Personal Data on behalf of Customers and in connection with CS Service.
All Products
Affiliate Sub-processors
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Content Square SAS | Support, Maintenance, Professional Services
| Visitor, Usage | Paris, France |
Content Square, Inc. | Support, Maintenance, Professional Services
| Visitor, Usage | New York, USA |
Content Square Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | London, UK |
Content Square Israel Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | Tel Aviv, Israel |
Content Square Singapore PTE | Support, Professional Services
| Visitor, Usage | Singapore |
Content Square Spain, S.L. | Professional Services
| Visitor, Usage | Madrid, Spain |
Content Square GmbH | Professional Services
| Visitor, Usage | Frankfurt, Germany |
Contentsquare Japan G.K. | Professional Services
| Visitor, Usage | Tokyo, Japan |
ContentSquare DXA SAAS Solutions LLC | Professional Services
| Visitor, Usage | Dubai, UAE |
ContentSquare Italy S.r.l. | Support, Professional Services
| Visitor, Usage | Milan, Italy |
ContentSquare Egypt | Support, Professional Services
| Visitor, Usage | Cairo, Egypt |
Content Square Canada | Professional Services
| Visitor, Usage | Toronto, Canada |
Hotjar Limited | Support, Maintenance, Professional Services | Visitor, Usage | Malta |
Hotjar Germany GmbH | Support, Maintenance, Professional Services | Visitor, Usage | Berlin, Germany |
Hotjar UK Limited | Support, Maintenance, Professional Services | Visitor, Usage | London, UK |
Hotjar Netherlands BV | Support, Maintenance, Professional Services | Visitor, Usage | Amsterdam, Netherlands |
Hotjar Web Portugal, Unipessoal LDA | Support, Maintenance, Professional Services | Visitor, Usage | Porto Salvo, Portugal |
2. Third-party Sub-processors
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Atlassian Pty Ltd (Jira) | Customer support and ticketing services | Visitor, Usage, Participants | Sydney, Australia |
Zendesk, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | San Francisco, USA |
Ada Support, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | Toronto, Canada |
Experience Analytics
(formerly titled “CS Digital” and “CS Apps”)
Cloud Storage Sub-processors
These Sub-processors are used by our Experience Analytics Solution to provide data hosting:
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for the following plans: Enterprise & Pro and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) |
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (AWS-EU-West-1) |
*Note: Unless instructed otherwise by the Customer, the default storage location for our Customers’ Personal Data is the following:
US-based Customers’ Personal Data is stored in the US,
EU-based & Japan-based Customers’ Personal Data is stored in the EU, and
APJ-based Customers’ Personal Data is stored in the US, except for our Japan-based Customers.
2. Additional Sub-processors involved in specific features
2.1 Client-facing Adoption Dashboard
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Usage | Europe: Ireland (AWS-EU-West-1) |
Salesforce.com France, S.A.S. (Tableau) | Dashboard Reporting platform for usage adoption of Experience Analytics
| Usage | France For more information about Salesforce’s data center locations for Tableau, visit this link |
2.2 User Lifecycle Extension (formerly titled Product Analytics Extension to Experience Analytics)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | USA: Virginia, USA (AWS-US-East-1) |
See “Product Analytics” section below for further sub-processors utilized for this feature |
2.3 Experience Analytics Connect (also titled as “DXA Connect”)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for Experience Analytics Connect | Visitor | USA: Virginia, USA (AWS-US-East-1) |
Snowflake | Data hosting for CSQ-hosted Snowflake (formerly “Heap-hosted Snowflake”) and Data hosting and transfer to Customer’s Snowflake data warehouse | Visitor | Customer’s Snowflake warehouse location For more information about our supported Snowflake data center locations, visit this link. |
2.4 Session Replay Summaries
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services Bedrock Anthropic Service | Data hosting for Session Replay Summaries feature for the following plans:
Enterprise & Pro | Visitor | Europe: Ireland (AWS-EU-West-1)
or
USA: Virginia, USA (AWS-US-East-1) |
Microsoft Azure OpenAI Service | Data hosting for Session Replay Summaries feature for the following plans:
Enterprise & Pro | Visitor | Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) |
3. Professional Services Sub-processors (opt-in only)
These Sub-processors are used to provide Support, Maintenance, and Professional Services:
Name | Type of Data | Location |
|---|---|---|
Atoms - Retex | Visitor | Milan, Italy |
Cardinal Path LLC | Visitor | Illinois, USA |
Converteo SAS | Visitor | Paris, France |
Dentsu Manchester Limited | Visitor | Manchester, UK |
Group Onepoint SAS | Visitor | Paris, France |
Level Access, Inc. | Visitor | Virginia, USA |
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India |
Temesis SAS | Visitor | Paris, France |
Up Reply GmbH | Visitor | Munich, Germany |
Zilker Trail Consulting | Visitor | Texas, USA |
Product Analytics
(formerly titled “Heap Platform” and “Activate”)
Cloud Storage Sub-processor
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Customer may select either: Europe: Ireland (AWS-EU-West-1),
Frankfurt, Germany (AWS EU-Central-1) (at-rest only),, or USA: Virginia, USA (AWS-US-East-1) |
2. Additional Sub-processors involved in specific features
2.1 Data Connect (also titled “PA Connect”) (formerly titled “Heap Connect”)
Name | Type of Services | Type of Data | Location |
|---|---|---|---|
Snowflake | Data hosting for CSQ-hosted Snowflake (formerly “Heap-Hosted Snowflake”)
Data access to analytics and reports of Customer Data in their Snowflake instance (“Snowflake integration”) | Visitor | Customer’s Snowflake warehouse location
For more information about our supported Snowflake data center locations, visit this link. |
2.2 Chat for Product Analytics (formerly titled “Heap AI CoPilot”)
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Amazon Web Services (AWS) | Hosting of the Heap AI and Customer Data and backups | Visitor | USA: Virginia, USA (AWS-US-East-1) |
OpenAI | Provides large language model | Visitor | San Francisco, USA |
3. Professional Services Sub-processors (opt-in only)
Name | Type of Data | Location |
|---|---|---|
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India |
Voice-of-Customer
Surveys & Feedback Sub-processors (formerly titled “Ask” and “Observe”)
Name | Type of Services | Type of Data | Location |
|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Europe: Ireland (AWS-EU-West-1) |
2. User Tests & Interviews Sub-processors (formerly titled “Engage”)
Name | Feature | Purpose | Type of Data | Location |
|---|---|---|---|---|
Daily.co | User Tests feature
| Hosting of recordings* | Participants | Europe: Ireland (AWS-EU-West-1)* |
| Hosting of name and duration of test | Participants | USA: Oregon, USA (AWS-US-West-2)* | |
Twilio Inc. | User Interviews feature | Data hosting
| Participants | Dublin, Ireland |
Postmark | User Tests and User Interviews features | Email delivery service | Participants | Chicago, USA |
*Calls are hosted according to the tester’s geographic location, see more information here. 3. Additional Sub-processors involved in specific features
3.1 Hotjar AI for Surveys
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Microsoft, Azure OpenAI Service | Provides Large Language Model (LLM) | Visitor | San Francisco, USA |
Following an internal assessment, we identified that some of the vendors listed above were not included in our previous list; Contentsquare has always used these vendors for the identified purpose, they are not new sub-processors.
SUBSCRIBING TO UPDATES TO THE SUB-PROCESSOR LIST
To subscribe to receive updates concerning new Sub-processors that will be added to this List, please use this Request Form or send an email to privacy@contentsquare.com.
REQUESTING MORE INFORMATION ABOUT A SUB-PROCESSOR
For any additional information concerning Contentsquare’s data processing practices or any specific Sub-processors, please send an email to privacy@contentsquare.com identifying the Sub-processor and the requested information.
OBJECTING TO A SUB-PROCESSOR
A Customer (in its role as Data Controller) may object to Contentsquare use of a specific Sub-processor in accordance with the terms of the Data Processing Agreement governing the relations between the parties. Such objection may be sent by email to privacy@contentsquare.com (subject line “Sub-processor Objection”) containing the following information:
Customer Entity Name
Sub-processor Entity Name
Grounds for Objection
Requestor Name
Requestor Email
Objections must be based on legitimate data protection grounds in accordance with the terms of Contentsquare’s standard Data Processing Agreement.