Contentsquare Sub-processors List
Unless otherwise defined herein, capitalized terms will have the meaning given to them in the Contentsquare Master Service Agreement.
The Sub-processors List (the “List”) below outlines Contentsquare’s current Affiliates and third-party sub-processors (“Sub-processors”) who are authorized to process Personal Data on behalf of Customers and in connection with CS Service.
Please refer to the relevant section of the table based on the products you have purchased.
All Products
Affiliate Sub-processors
Name | Purpose | Type of Data | Location | Transfer Mechanisms |
|---|---|---|---|---|
Content Square SAS | Support, Maintenance, Professional Services
| Visitor, Usage | Paris, France | Intercompany SCCs |
Content Square, Inc. | Support, Maintenance, Professional Services
| Visitor, Usage | New York, USA | Intercompany SCCs DPF |
Content Square Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | London, UK | Intercompany SCCs |
Content Square Israel Ltd. | Support, Maintenance, Professional Services
| Visitor, Usage | Tel Aviv, Israel | Adequacy decision Intercompany SCCs |
Content Square Singapore PTE | Support, Professional Services
| Visitor, Usage | Singapore | Adequacy decision Intercompany SCCs |
Content Square Spain, S.L. | Professional Services
| Visitor, Usage | Madrid, Spain | Intercompany SCCs |
Content Square GmbH | Professional Services
| Visitor, Usage | Frankfurt, Germany | Intercompany SCCs |
Contentsquare Japan G.K. | Professional Services
| Visitor, Usage | Tokyo, Japan | Adequacy decision Intercompany SCCs |
ContentSquare DXA SAAS Solutions LLC | Professional Services
| Visitor, Usage | Dubai, UAE | Intercompany SCCs |
ContentSquare Italy S.r.l. | Support, Professional Services
| Visitor, Usage | Milan, Italy | Intercompany SCCs |
ContentSquare Egypt | Support, Professional Services
| Visitor, Usage | Cairo, Egypt | Intercompany SCCs |
Content Square Canada | Professional Services
| Visitor, Usage | Toronto, Canada | Adequacy decision Intercompany SCCs |
Hotjar Germany GmbH | Support, Maintenance, Professional Services | Visitor, Usage | Berlin, Germany | Intercompany SCCs |
Hotjar UK Limited | Support, Maintenance, Professional Services | Visitor, Usage | London, UK | Intercompany SCCs |
Hotjar Netherlands BV | Support, Maintenance, Professional Services | Visitor, Usage | Amsterdam, Netherlands | Intercompany SCCs |
Hotjar Web Portugal, Unipessoal LDA | Support, Maintenance, Professional Services | Visitor, Usage | Porto Salvo, Portugal | Intercompany SCCs |
Hotjar Web Services Spain S.L. | Support, Maintenance, Professional Services | Visitor, Usage | Barcelona, Spain | Intercompany SCCs |
Loris Technologies, Ltd. | Support, Maintenance, Professional Services and conversational intelligence services | Service Agent, End-User | Tel Aviv, Israel | Adequacy decision Intercompany SCCs |
2. Third-party Sub-processors
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Atlassian Pty Ltd (Jira) | Customer support and ticketing services | Visitor, Usage, Participants | Sydney, Australia | SCCs DPF |
Zendesk, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | San Francisco, USA | SCCs DPF |
Ada Support, Inc. | Customer support and ticketing services | Visitor, Usage, Participants | Toronto, Canada | Adequacy decision SCCs |
3. Professional Services Sub-processors (OPT-IN ONLY)
These Sub-processors are used to provide Support, Maintenance, and Professional Services:
Name | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|
Atoms - Retex | Visitor | Milan, Italy | N/A |
Cardinal Path LLC | Visitor | Illinois, USA | SCCs |
Converteo SAS | Visitor | Paris, France | N/A |
Dentsu Manchester Limited | Visitor | Manchester, UK | UK SCCs |
Group Onepoint SAS | Visitor | Paris, France | N/A |
Level Access, Inc. | Visitor | Virginia, USA | SCCs |
Scaletrix.AI (Alabs AI Privacy Limited) | Visitor | Gurgaon, India | SCCs |
Temesis SAS | Visitor | Paris, France | N/A |
Up Reply GmbH | Visitor | Munich, Germany | N/A |
Zilker Trail Consulting | Visitor | Texas, USA | SCCs |
Experience Analytics
(formerly titled “CS Digital” and “CS Apps”)
Cloud Storage Sub-processors
These Sub-processors are used by our Experience Analytics Solution to provide data hosting:
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for the following plans: Pro & Enterprise and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs
|
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (AWS-EU-West-1) | DPF SCCs
|
Name | Purpose | Type of Data | Location |
|---|---|---|---|
Microsoft Azure | Data hosting for the following plans: Pro & Enterprise and Experience Analytics Extension to Product Analytics (“DXA Extension”) | Visitor | Customer may select* either: Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) |
Data hosting for the following plans: Free & Growth | Visitor | Europe: Ireland (Azure-North Europe) |
*Note: Unless instructed otherwise by the Customer, the default storage location for our Customers’ Visitor Data is the following:
US-based Customers’ Visitor Data is stored in the US,
EU-based & Japan-based Customers’ Visitor Data is stored in the EU, and
APJ-based Customers’ Visitor Data is stored in the US, except for our Japan-based Customers.
2. Additional Sub-processors involved in specific features
2.1 User Lifecycle Extension (formerly titled Product Analytics Extension to Experience Analytics)
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Data is hosted in the same region selected by Customer under Section 1 above: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
See “Product Analytics” section below for further sub-processors utilized for this feature |
2.3 Data Connect (also titled as “Data Connect for Experience Analytics”, formerly titled “DXA Data Connect”)
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for Data Connect | Visitor | Based on the location of the Customer:
Europe: Frankfurt, Germany (AWS-EU-Central-1)
or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
2.4 Sense AI Features including Sense Chat, Error Summaries, Mapping Assistant, and Session Replay Summaries
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services Bedrock | Provides Large Language Model (LLM) for the following plans: Growth (Sense Chat feature only), Pro, and Enterprise | Visitor | Based on the location of the Customer, LLM is served from: Europe: Ireland (AWS-EU-West-1), United Kingdom (AWS-EU-West-2), France (AWS-EU-West-3), Germany (AWS-EU-Central-1), Sweden (AWS-EU-North-1), Italy (AWS-EU-South-1), or Spain (AWS-EU-South-2), or USA: Virginia, USA (AWS-US-East-1), Ohio, USA (AWS-US-East-2), or Oregon, USA (AWS-US-West-2) | DPF SCCs |
Microsoft Corporation (Azure) | Provides Large Language Model (LLM) for the following plans: Growth (Sense Chat feature only), Pro, and Enterprise | Visitor | Based on the location of the Customer, LLM is served from: Europe or USA | DPF SCCs |
Product Analytics
(formerly titled “Heap Platform” and “Activate”)
Cloud Storage Sub-processor
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Customer may select either: Europe: Ireland (AWS-EU-West-1), Frankfurt, Germany (AWS EU-Central-1) (at-rest only),, or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
2. Additional Sub-processors involved in specific features
2.1 Connect (also titled “PA Connect”) (formerly titled “Heap Connect”)
Name | Type of Services | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting for Data Connect | Visitor | Data is hosted in the same region selected by Customer under Section 1 above:
Europe: Ireland (AWS-EU-West-1),
Frankfurt, Germany (AWS EU-Central-1) (at-rest only), or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
2.2 Sense Chat (formerly titled “Heap AI CoPilot” or “Chat for Product Analytics”)
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services (AWS) | Hosting of Sense Chat and Customer Data and backups | Visitor | Data is hosted in the same region selected by Customer under Section 1 above: Europe: Ireland (AWS-EU-West-1), or USA: Virginia, USA (AWS-US-East-1) | DPF SCCs |
OpenAI OpCo, LLC | Provides Large Language Model (LLM) | Visitor | LLM is served in the same region selected by Customer under Section 1 above: Europe or USA | SCCs |
Voice-of-Customer
Surveys & Feedback (formerly titled “Ask”) and Observe Sub-processors
Name | Type of Services | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Visitor | Europe: Ireland (AWS-EU-West-1) | DPF SCCs |
2. User Tests & Interviews Sub-processors (formerly titled “Engage”)
Name | Feature | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|---|
Daily.co | User Tests feature
| Hosting of recordings* | Participants | Europe: Ireland (AWS-EU-West-1)* | DPF SCCs |
| Hosting of name and duration of test | Participants | USA: Oregon, USA (AWS-US-West-2)* | DPF SCCs | |
Twilio Inc. | User Interviews feature | Data hosting
| Participants | Dublin, Ireland | N/A |
Postmark | User Tests and User Interviews features | Email delivery service | Participants | Chicago, USA | DPF SCCs |
Tremendous, LLC | User Tests and User Interviews features | Participant rewards provider | Participants | New York, USA | DPF |
*Calls are hosted according to the tester’s geographic location, see more information here.
3. Additional Sub-processors involved in specific features
3.1 Hotjar AI for Surveys
Name | Purpose | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Microsoft Corporation, (Azure OpenAI Service) | Provides Large Language Model (LLM) | Visitor | France | DPF SCCs |
Conversation Intelligence
(formerly titled “Loris VOC Insights”)
1. Cloud Storage Sub-processors
This Sub-processor is used by our Loris AI Solution to provide data hosting:
Name | Type of Services | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Amazon Web Services, Inc. | Data hosting | Agent, Requestor | Customer may select either:
USA: Ohio, USA (AWS-US-East-2)
EU: Ireland (AWS-EU-West-1) | DPF SCCs |
2. Third-party Sub-processors
Name | Type of Services | Type of Data | Location | Transfer mechanisms |
|---|---|---|---|---|
Microsoft Corporation (Azure) | Provides Large Language Model (LLM) | Agent, Requestor | Based on capacity, LLM is served from: Australia: New South Wales (Azure-Australia East) or Europe: France (Azure- France Central), Germany (Azure-Germany West Central), Italy (Azure-Italy North) Netherlands (Azure-West Europe), Norway (Azure-Norway East), Sweden (Azure-Sweden Central), Switzerland (Azure-Switzerland North), or United Kingdom (Azure-UK South) or North America: Arizona, USA (Azure-West US 3), California, USA (Azure-West US), Canada (Azure-Canada East), Illinois, USA (Azure-North Central US), Texas, USA (Azure-South Central US), Virginia, USA (Azure-East US), or Virginia, USA (Azure-East US 2) or Asia: Japan (Azure-Japan East), or India (Azure-South India) | DPF SCCs |
Deepgram, Inc. | Speech-to-text services | Agent, Requestor | San Francisco, USA | SCCs |
Snowflake Inc. | Data warehouse | Agent, Requestor | USA: Ohio, USA (AWS-US-East-2) | DPF SCCs |
Salesforce, Inc. | Tableau Dashboard reporting feature | Agent | San Francisco, USA | DPF SCCs |
Turbopuffer Inc. | Vector database search and index service | Agent, Requestor | USA: Ohio, USA (AWS-US-East-2) | SCCs |
Following an internal assessment, we identified that some of the vendors listed above were not included in our previous list; Contentsquare has always used these vendors for the identified purpose, they are not new sub-processors.
SUBSCRIBING TO UPDATES TO THE SUB-PROCESSOR LIST
To subscribe to receive updates concerning new Sub-processors that will be added to this List, please use this Request Form or send an email to privacy@contentsquare.com.
REQUESTING MORE INFORMATION ABOUT A SUB-PROCESSOR
For any additional information concerning Contentsquare’s data processing practices or any specific Sub-processors, please send an email to privacy@contentsquare.com identifying the Sub-processor and the requested information.
OBJECTING TO A SUB-PROCESSOR
A Customer (in its role as Data Controller) may object to Contentsquare use of a specific Sub-processor in accordance with the terms of the Data Processing Agreement governing the relations between the parties. Such objection may be sent by email to privacy@contentsquare.com (subject line “Sub-processor Objection”) containing the following information:
Customer Entity Name
Sub-processor Entity Name
Grounds for Objection
Requestor Name
Requestor Email
Objections must be based on legitimate data protection grounds in accordance with the terms of Contentsquare’s standard Data Processing Agreement.