Snapshot 4562
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
skip to content Over 10,000 businesses trust Heap to power their analytics. Maintaining that trust is our paramount concern. This page gives you access to relevant information regarding our approach to privacy, security, and compliance. Last Updated: February 2025 Sub-processor Description of Processing Country Privacy Notice Heap Core Software Services Amazon Web Services (AWS) Description of Processing Hosts the Services and Customer Data and backups Country USA: Virginia (primary) and Oregon (backup) Europe: Ireland (AWS-EU-West-1) Privacy Notice Link Zendesk, Inc. Description of Processing Provides a customer service platform Country San Francisco, USA Privacy Notice Link Ada Support, Inc. Description of Processing Providers a customer service ticket management tool Country Toronto, Canada Privacy Notice Link Heap Session Replay Add-on Auryc Description of Processing Performs analytics and reporting on Customer Data within the Session Replay add-on Country Wilmington, USA Privacy Notice Link Google Cloud Platform Description of Processing Hosts the Session Replay add-on and Customer Data and backups Country Mountain View, USA For more information about Google’s data center locations, visit this link Privacy Notice Link Looker Studio (Google) Description of Processing Performs analytics and reporting on Customer Data within the Session Replay add-on Country Mountain View, USA Privacy Notice Link HEAP VOICE-OF-CUSTOMER (VOC) ADD-ON Auryc Description of Processing Performs analytics and reporting on Customer Data within the VOC add-on Country Wilmington, USA Privacy Notice Link Google Cloud Platform Description of Processing Hosts the VOC add-on and Customer Data and backups Country Mountain View, USA For more information about Google’s data center locations, visit this link Privacy Notice Link IBM Description of Processing Performs analytics and reporting on Customer Data within the VOC Country Armonk, USA Privacy Notice Link HEAP CONNECT (opt-in only) Snowflake Description of Processing Hosts the Services and Customer Data and backups (“Heap-Hosted Snowflake”) Gives access to data analytics and reports of Customer Data in their Snowflake instance (“Snowflake integration”) Country Bozeman, USA Privacy Notice Link HEAP AI (opt-in only) Amazon Web Services (AWS) Description of Processing Hosts the Heap AI and Customer Data and backups Country USA: Virginia (primary) and Oregon (backup) Privacy Notice Link OpenAI Description of Processing Provides large language model Country San Francisco, USA Privacy Notice Link Heap Professional Services Scaletrix Description of Processing Professional services partner Country Gurgaon, India Privacy Notice Link Affiliates Contentsquare Description of Processing Consulting, support, maintenance, implementation, and development Country Paris, France Privacy Notice Link Hotjar Description of Processing Consulting, support, maintenance, implementation, and development Country Malta Privacy Notice Link Following an internal assessment, we identified that some of the vendors listed above were not included in our previous list ; Heap has always used these vendors for the identified purpose, they are not new sub-processors. Definitions “Heap Services” means the products and services provided by Heap to Customers under an agreement signed between them. “Personal Data”, “Processing”, “Processor”, “Sub-processor” shall have the meaning as defined under applicable data protection laws. Subscribing to updates from the sub-processor list To subscribe to updates concerning Heap's Sub-processor List, please use this Request Form or send an email to privacy@contentsquare.com with a request to subscribe, and you will be provided with updates on any changes in this list. Requesting more information about a sub-processor For any additional information concerning Heap’s data processing practices or any specific Sub-processors, please send an email to privacy@contentsquare.com identifying the Sub-processor and the requested information. Objecting to a sub-processor A customer (in its capacity as Data Controller) may object to Heap’s use of a specific Sub-processor in accordance with the terms of the Data Processing Agreement governing the relations between the parties. Such objection may be sent by email to privacy@contentsquare.com (subject line “Sub-processor Objection”) containing the following information: Customer Entity Name Sub-processor Entity Name Grounds for Objection Requestor Name Requestor Email Objections must be based on legitimate data protection grounds in accordance with the terms of Heap’s standard Data Processing Agreement.