Sub-processors
Qontiv provides 30 days' advance notice before adding or materially changing a sub-processor. Subscribe below to receive email notifications.
12 sub-processors are disclosed below: 7 are processing data today, and 5 are disclosed ahead of enablement and are processing no data.
What the status column means
- Active
- A credential is provisioned and the sub-processor is processing data today.
- Not yet enabled
- The integration code exists but no credential is provisioned in any Qontiv environment, so this sub-processor is not in service and holds no Qontiv data — any request to it would fail authentication. It is disclosed here in advance so you get the full 30-day objection window before enablement, not after.
| Sub-processor | Status | Purpose | Data location | Added |
|---|---|---|---|---|
| Cloudflare | Active | DDoS protection, CDN, DNS, WAF, and hosting for the public status page and uptime monitoring at status.qontiv.com Network traffic metadata (IP addresses, request headers). | Global | 2026-04-01 |
| Microsoft Azure | Active | Cloud infrastructure host (compute, databases, networking, storage) All production and customer data. | US East (default); EU West available by contract | 2026-01-01 |
| Anthropic | Not yet enabled | Foundation model for AI Copilot features (Claude). DPA to be executed before enablement. Copilot conversation context, prompt content, model responses. | US | 2026-05-13 |
| OpenAI | Not yet enabled | Embedding generation for Document Management System (DMS) RAG pipeline. DPA to be executed before enablement. Document content (embeddings only — no document content stored at OpenAI). | US | 2026-05-13 |
| Voyage AI | Not yet enabled | Embedding generation for the Docs Assistant corpus. DPA to be executed before enablement. Docs corpus content (embeddings only). | US | 2026-05-13 |
| Apollo.io | Active | Website visitor identification and firmographic enrichment on qontiv.com marketing pages. Apollo is a data broker and performs IP-to-company de-anonymization. Loaded only after Cookiebot marketing consent. No customer production data. Processing since 2026-05-07; first disclosed on this register 2026-08-05. IP address and derived company attributes (company name, domain, industry, size). | US | 2026-08-05 |
| Google Analytics | Active | Marketing analytics for the qontiv.com marketing site, including the Trust Center; NOT used in-product Anonymized web traffic (IP anonymized, no user IDs). | US/EU | 2026-04-01 |
| HubSpot | Active | CRM and marketing automation (prospect and customer records) Contact names, emails, company names, engagement data. | US (adequacy/SCCs) | 2026-04-01 |
| PostHog | Active | Product analytics (user behavior, feature usage) Pseudonymized user event data; no PII in event payloads. | EU (PostHog Cloud EU) | 2026-04-01 |
| Cookiebot (Usercentrics A/S) | Active | Cookie-consent management for qontiv.com; gates every other marketing script until consent is recorded. Processing since 2026-05-06; first disclosed on this register 2026-08-05. IP address and consent state. | EU (Denmark) | 2026-08-05 |
| Stripe | Not yet enabled | Payment processing for subscription billing (H4.6 Billing) Payment card data, billing contact information. | US/EU | 2026-05-13 |
| Twilio | Not yet enabled | SMS delivery for alert notifications Recipient phone number; alert message body (alert title, priority, and message text, which may reference equipment, work order, or lot identifiers). | US | 2026-08-05 |
Get notified of changes
Subscribe to receive email notification at least 30 days before any sub-processor addition or material change.