Sub-processors
Qontiv provides 30 days' advance notice before adding or materially changing a sub-processor. Subscribe below to receive email notifications.
| Sub-processor | Purpose | Data location | Added |
|---|---|---|---|
| Microsoft Azure | Cloud infrastructure — compute, managed PostgreSQL databases, Redis/Valkey cache, blob storage, and networking. All customer production data, manufacturing records, and user accounts are stored and processed in Azure. | United States (East US default); EU West available by contract for EU data-residency requirements | Thu Jan 01 2026 00:00:00 GMT+0000 (Coordinated Universal Time) |
| Cloudflare | DDoS protection, CDN, DNS, and WAF for qontiv.com and the Qontiv API. Processes network traffic metadata (IP addresses, request headers) only. | Global CDN | Wed Apr 01 2026 00:00:00 GMT+0000 (Coordinated Universal Time) |
| Anthropic | Foundation model (Claude) powering the Qontiv AI Copilot — CAPA narrative generation, predictive maintenance recommendations, shift summaries, and document-assisted queries. Processes copilot conversation context, prompt content, and model responses. DPA covering GDPR Article 28 and EU AI Act Article 26 in place. Qontiv is the EU AI Act deployer; Anthropic is the Article 28 provider. | United States | Wed May 13 2026 00:00:00 GMT+0000 (Coordinated Universal Time) |
| OpenAI | Embedding generation for the Document Management System RAG pipeline. Document content is converted to vector embeddings for semantic search; document content is not stored at OpenAI. | United States | Wed May 13 2026 00:00:00 GMT+0000 (Coordinated Universal Time) |
| Voyage AI | Embedding generation for the Docs Assistant corpus. Docs corpus content is converted to vector embeddings; content is not stored at Voyage AI. | United States | Wed May 13 2026 00:00:00 GMT+0000 (Coordinated Universal Time) |
| PostHog | Product analytics and feature usage telemetry for the Qontiv application. Pseudonymized user event data; no PII in event payloads. Stored in PostHog's EU cloud region. | European Union (PostHog Cloud EU) | Wed Apr 01 2026 00:00:00 GMT+0000 (Coordinated Universal Time) |
| HubSpot | CRM and marketing automation. Processes contact information submitted via demo request, newsletter, and contact forms on qontiv.com. Does not receive customer production or manufacturing data. | United States (adequacy / SCCs for EU data subjects) | Wed Apr 01 2026 00:00:00 GMT+0000 (Coordinated Universal Time) |
| Google Analytics | Web analytics for qontiv.com only — not used in the Qontiv application. Anonymized pageview data; IP anonymized, no user IDs. | United States / European Union | Wed Apr 01 2026 00:00:00 GMT+0000 (Coordinated Universal Time) |
| Stripe | Subscription billing and payment processing. Processes payment card data and billing contact information. PCI DSS Level 1 certified. | United States / European Union | Wed May 13 2026 00:00:00 GMT+0000 (Coordinated Universal Time) |
Get notified of changes
Subscribe to receive email notification at least 30 days before any sub-processor addition or material change.