Snapshot 98271
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Last updated: June 2026 (v2026.4) Contentsquare Sub-processors List Unless otherwise defined herein, capitalized terms will have the meaning given to them in the Contentsquare Master Service Agreement. The Sub-processors List (the “List”) below outlines Contentsquare’s current Affiliates and third-party sub-processors (“Sub-processors”) who are authorized to process Personal Data on behalf of Customers and in connection with CS Service. Please refer to the relevant section of the table based on the products you have purchased. All Products 1. Affiliate Sub-processors Name Purpose Type of Data Location Transfer Mechanisms Content Square SAS Support, Maintenance, Professional Services Visitor, Usage Paris, France Intercompany SCCs Content Square, Inc. Support, Maintenance, Professional Services Visitor, Usage New York, USA Intercompany SCCs DPF Content Square Ltd. Support, Maintenance, Professional Services Visitor, Usage London, UK Intercompany SCCs Content Square Israel Ltd. Support, Maintenance, Professional Services Visitor, Usage Tel Aviv, Israel Adequacy decision Intercompany SCCs Content Square Singapore PTE Support, Professional Services Visitor, Usage Singapore Intercompany SCCs Content Square Spain, S.L. Professional Services Visitor, Usage Madrid, Spain Intercompany SCCs Content Square GmbH Professional Services Visitor, Usage Frankfurt, Germany Intercompany SCCs Contentsquare Japan G.K. Professional Services Visitor, Usage Tokyo, Japan Adequacy decision Intercompany SCCs ContentSquare DXA SAAS Solutions LLC Professional Services Visitor, Usage Dubai, UAE Intercompany SCCs ContentSquare Italy S.r.l. Support, Professional Services Visitor, Usage Milan, Italy Intercompany SCCs ContentSquare Egypt Support, Professional Services Visitor, Usage Cairo, Egypt Intercompany SCCs Content Square Canada Professional Services Visitor, Usage Toronto, Canada Adequacy decision Intercompany SCCs Hotjar Germany GmbH Support, Maintenance, Professional Services Visitor, Usage Berlin, Germany Intercompany SCCs Hotjar UK Limited Support, Maintenance, Professional Services Visitor, Usage London, UK Intercompany SCCs Hotjar Netherlands BV Support, Maintenance, Professional Services Visitor, Usage Amsterdam, Netherlands Intercompany SCCs Hotjar Web Portugal, Unipessoal LDA Support, Maintenance, Professional Services Visitor, Usage Porto Salvo, Portugal Intercompany SCCs Hotjar Web Services Spain S.L. Support, Maintenance, Professional Services Visitor, Usage Barcelona, Spain Intercompany SCCs Loris Technologies, Ltd. Support, Maintenance, Professional Services and conversational intelligence services Service Agent, End-User Tel Aviv, Israel Adequacy decision Intercompany SCCs 2. Third-party Sub-processors Name Purpose Type of Data Location Transfer mechanisms Atlassian Pty Ltd (Jira) Customer support and ticketing services Visitor, Usage, Participants Sydney, Australia SCCs DPF Zendesk, Inc. Customer support and ticketing services Visitor, Usage, Participants San Francisco, USA SCCs DPF Ada Support, Inc. Customer support and ticketing services Visitor, Usage, Participants Toronto, Canada Adequacy decision SCCs 3. Professional Services Sub-processors (OPT-IN ONLY) These Sub-processors are used to provide Support, Maintenance, and Professional Services: Name Type of Data Location Transfer mechanisms Atoms - Retex Visitor Milan, Italy N/A Cardinal Path LLC Visitor Illinois, USA SCCs Converteo SAS Visitor Paris, France N/A Dentsu Manchester Limited Visitor Manchester, UK UK SCCs Group Onepoint SAS Visitor Paris, France N/A Level Access, Inc. Visitor Virginia, USA SCCs Scaletrix.AI (Alabs AI Privacy Limited) Visitor Gurgaon, India SCCs Temesis SAS Visitor Paris, France N/A Up Reply GmbH Visitor Munich, Germany N/A Zilker Trail Consulting Visitor Texas, USA SCCs Experience Analytics (formerly titled “CS Digital” and “CS Apps”) Cloud Storage Sub-processors These Sub-processors are used by our Experience Analytics Solution to provide data hosting: Name Purpose Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting for the following plans: Pro & Enterprise and Experience Analytics Extension to Product Analytics (“DXA Extension”) Visitor Customer may select* either: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) DPF SCCs Data hosting for the following plans: Free & Growth Visitor Europe: Ireland (AWS-EU-West-1) DPF SCCs Name Purpose Type of Data Location Microsoft Azure Data hosting for the following plans: Pro & Enterprise and Experience Analytics Extension to Product Analytics (“DXA Extension”) Visitor Customer may select* either: Europe: Ireland (Azure-North Europe) or USA: Virginia, USA (Azure-East US) Data hosting for the following plans: Free & Growth Visitor Europe: Ireland (Azure-North Europe) *Note: Unless instructed otherwise by the Customer, the default storage location for our Customers’ Visitor Data is the following: US-based Customers’ Visitor Data is stored in the US, EU-based & Japan-based Customers’ Visitor Data is stored in the EU, and APJ-based Customers’ Visitor Data is stored in the US, except for our Japan-based Customers. 2. Additional Sub-processors involved in specific features 2.1 User Lifecycle Extension (formerly titled Product Analytics Extension to Experience Analytics) Name Purpose Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting Visitor Data is hosted in the same region selected by Customer under Section 1 above: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) DPF SCCs See “Product Analytics” section below for further sub-processors utilized for this feature 2.2 Data Connect (also titled as “Data Connect for Experience Analytics”, formerly titled “DXA Data Connect”) Name Purpose Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting for Data Connect Visitor Based on the location of the Customer: Europe: Frankfurt, Germany (AWS-EU-Central-1) or USA: Virginia, USA (AWS-US-East-1) DPF SCCs 2.3 Sense AI Features including Sense Chat, Error Summaries, Mapping Assistant, and Session Replay Summaries Name Purpose Type of Data Location Transfer mechanisms Amazon Web Services Bedrock Provides Large Language Model (LLM) for the following plans: Growth, Pro, and Enterprise Visitor Based on the location of the Customer, LLM is served from: Europe: Ireland (AWS-EU-West-1), United Kingdom (AWS-EU-West-2), France (AWS-EU-West-3), Germany (AWS-EU-Central-1), Sweden (AWS-EU-North-1), Italy (AWS-EU-South-1), or Spain (AWS-EU-South-2), or USA: Virginia, USA (AWS-US-East-1), Ohio, USA (AWS-US-East-2), or Oregon, USA (AWS-US-West-2) DPF SCCs Microsoft Corporation (Azure) Provides Large Language Model (LLM) for the following plans: Growth, Pro, and Enterprise Visitor Based on the location of the Customer, LLM is served from: Europe or USA DPF SCCs Product Analytics (formerly titled “Heap Platform” and “Activate”) Cloud Storage Sub-processor Name Purpose Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting Visitor Customer may select either: Europe: Ireland (AWS-EU-West-1), Frankfurt, Germany (AWS EU-Central-1) (at-rest only),, or USA: Virginia, USA (AWS-US-East-1) DPF SCCs 2. Additional Sub-processors involved in specific features 2.1 Connect (also titled “PA Connect”) (formerly titled “Heap Connect”) Name Type of Services Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting for Data Connect Visitor Data is hosted in the same region selected by Customer under Section 1 above: Europe: Ireland (AWS-EU-West-1), Frankfurt, Germany (AWS EU-Central-1) (at-rest only), or USA: Virginia, USA (AWS-US-East-1) DPF SCCs 2.2 Sense Chat (formerly titled “Heap AI CoPilot” or “Chat for Product Analytics”) Name Purpose Type of Data Location Transfer mechanisms Amazon Web Services (AWS) Hosting of Sense Chat and Customer Data and backups Visitor Data is hosted in the same region selected by Customer under Section 1 above: Europe: Ireland (AWS-EU-West-1), or USA: Virginia, USA (AWS-US-East-1) DPF SCCs OpenAI OpCo, LLC Provides Large Language Model (LLM) Visitor LLM is served in the same region selected by Customer under Section 1 above: Europe or USA SCCs Voice-of-Customer Surveys & Feedback (formerly titled “Ask”) and Observe Sub-processors Name Type of Services Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting Visitor Europe: Ireland (AWS-EU-West-1) DPF SCCs 2. User Tests & Interviews Sub-processors (formerly titled “Engage”) Name Feature Purpose Type of Data Location Transfer mechanisms Daily.co User Tests feature Hosting of recordings* Participants Europe: Ireland (AWS-EU-West-1)* DPF SCCs Hosting of name and duration of test Participants USA: Oregon, USA (AWS-US-West-2)* DPF SCCs Twilio Inc. User Interviews feature Data hosting Participants Dublin, Ireland N/A Postmark User Tests and User Interviews features Email delivery service Participants Chicago, USA DPF SCCs Tremendous, LLC User Tests and User Interviews features Participant rewards provider Participants New York, USA DPF *Calls are hosted according to the tester’s geographic location, see more information here. 3. Additional Sub-processors involved in specific features 3.1 Hotjar AI for Surveys Name Purpose Type of Data Location Transfer mechanisms Microsoft Corporation, (Azure OpenAI Service) Provides Large Language Model (LLM) Visitor France DPF SCCs Conversation Intelligence (formerly titled “Loris VOC Insights”) 1. Cloud Storage Sub-processors This Sub-processor is used by our Loris AI Solution to provide data hosting: Name Type of Services Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting Agent, Requestor Customer may select either: USA: Ohio, USA (AWS-US-East-2) EU: Ireland (AWS-EU-West-1) DPF SCCs 2. Third-party Sub-processors Name Type of Services Type of Data Location Transfer mechanisms Microsoft Corporation (Azure) Provides Large Language Model (LLM) Agent, Requestor Based on capacity, LLM is served from: Australia: New South Wales (Azure-Australia East) or Europe: France (Azure- France Central), Germany (Azure-Germany West Central), Italy (Azure-Italy North) Netherlands (Azure-West Europe), Norway (Azure-Norway East), Sweden (Azure-Sweden Central), Switzerland (Azure-Switzerland North), or United Kingdom (Azure-UK South) or North America: Arizona, USA (Azure-West US 3), California, USA (Azure-West US), Canada (Azure-Canada East), Illinois, USA (Azure-North Central US), Texas, USA (Azure-South Central US), Virginia, USA (Azure-East US), or Virginia, USA (Azure-East US 2) or Asia: Japan (Azure-Japan East), or India (Azure-South India) DPF SCCs Deepgram, Inc. Speech-to-text services Agent, Requestor San Francisco, USA SCCs Snowflake Inc. Data warehouse Agent, Requestor USA: Ohio, USA (AWS-US-East-2) DPF SCCs Salesforce, Inc. Tableau Dashboard reporting feature Agent San Francisco, USA DPF SCCs Turbopuffer Inc. Vector database search and index service Agent, Requestor USA: Ohio, USA (AWS-US-East-2) SCCs Contentsquare Experience (CSQ XP, XP) 1. Cloud Storage Sub-processors Name Purpose Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting Visitor, Account, Agents, Requesters Customer may select* either: Europe: Ireland (AWS-EU-West-1) or USA: Virginia, USA (AWS-US-East-1) - DPF - SCCs *Note: Unless instructed otherwise by the Customer, the default storage location for our Customers’ Visitor Data is the following: US-based Customers’ Visitor Data is stored in Virginia, USA, EU-based & Japan-based Customers’ Visitor Data is stored in Ireland, and APJ-based Customers’ Visitor Data is stored in Virginia, USA, except for our Japan-based Customers. 2. Data Connect Sub-processors* Name Purpose Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting for Data Connect Visitor Data is hosted in the same region selected by Customer in the Cloud Storage section above: Europe: Ireland (AWS-EU-West-1), Frankfurt, Germany (AWS EU-Central-1) (at-rest only), or USA: Virginia, USA (AWS-US-East-1) - DPF - SCCs *This Sub-Processor is only applicable if this feature is part of the Customer’s purchased plan, or when our Customers access or use Data Connect. 3. Sense AI Feature Sub-processors* Including: Sense Chat, Error Summaries, Mapping Assistant, and Session Replay Summaries Name Purpose Type of Data Location Transfer mechanisms Amazon Web Services, Inc.(Bedrock) Provides Large Language Model (LLM) Visitor, Account, Agents, and Requesters Based on the location of the Customer, LLM is served from: Europe: Ireland (AWS-EU-West-1), United Kingdom (AWS-EU-West-2), France (AWS-EU-West-3), Germany (AWS-EU-Central-1), Sweden (AWS-EU-North-1), Italy (AWS-EU-South-1), or Spain (AWS-EU-South-2), or USA: Virginia, USA (AWS-US-East-1), Ohio, USA (AWS-US-East-2), or Oregon, USA (AWS-US-West-2) - DPF - SCCs Microsoft Corporation (Azure OpenAI) Provides Large Language Model (LLM) Visitor, Account, Agents, and Requesters Based on the location of the Customer, LLM is served from: Europe or USA - DPF - SCCs *These Sub-Processors are only applicable if this feature is part of the Customer’s purchased plan, or when Customers access or use Sense AI Feature. 4. Surveys & Feedback Sub-processors* Name Type of Services Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting Visitor Europe: Ireland (AWS-EU-West-1) - DPF - SCCs *This Sub-Processor is only applicable if this feature is part of the Customer’s purchased plan, or when Customers access or use Surveys & Feedback feature. 5. Conversation Intelligence Sub-processors* Name Type of Services Type of Data Location Transfer mechanisms Amazon Web Services, Inc. Data hosting Agent, Requestor By default: USA: Ohio, USA (AWS-US-East-2) Upon Customer request: EU: Ireland (AWS-EU-West-1) - DPF - SCCs Microsoft Corporation (Azure) Provides Large Language Model (LLM) Agent, Requestor Based on capacity, LLM is served from: Australia: New South Wales (Azure-Australia East) or Europe: France (Azure- France Central), Germany (Azure-Germany West Central), Italy (Azure-Italy North), Netherlands (Azure-West Europe), Norway (Azure-Norway East), Sweden (Azure-Sweden Central), Switzerland (Azure-Switzerland North), or United Kingdom (Azure-UK South) or North America: Arizona, USA (Azure-West US 3), California, USA (Azure-West US), Canada (Azure-Canada East), Illinois, USA (Azure-North Central US), Texas, USA (Azure-South Central US), Virginia, USA (Azure-East US), or Virginia, USA (Azure-East US 2) or Asia: Japan (Azure-Japan East), or India (Azure-South India) - DPF - SCCs Deepgram, Inc. Speech-to-text services Agent, Requestor San Francisco, USA SCCs Snowflake Inc. Data warehouse Agent, Requestor USA: Ohio, USA (AWS-US-East-2) DPF SCCs Salesforce, Inc. Tableau Dashboard reporting feature Agent San Francisco, USA DPF SCCs Turbopuffer Inc. Vector database search and index service Agent, Requestor USA: Ohio, USA (AWS-US-East-2) SCCs *These Sub-Processors are only applicable if this feature is part of the Customer’s purchased plan, or when Customers access or use Conversation Intelligence feature. Following an internal assessment, we identified that some of the vendors listed above were not included in our previous list; Contentsquare has always used these vendors for the identified purpose, they are not new sub-processors. SUBSCRIBING TO UPDATES TO THE SUB-PROCESSOR LIST To subscribe to receive updates concerning new Sub-processors that will be added to this List, please use this Request Form or send an email to privacy@contentsquare.com. REQUESTING MORE INFORMATION ABOUT A SUB-PROCESSOR For any additional information concerning Contentsquare’s data processing practices or any specific Sub-processors, please send an email to privacy@contentsquare.com identifying the Sub-processor and the requested information. OBJECTING TO A SUB-PROCESSOR A Customer (in its role as Data Controller) may object to Contentsquare use of a specific Sub-processor in accordance with the terms of the Data Processing Agreement governing the relations between the parties. Such objection may be sent by email to privacy@contentsquare.com (subject line “Sub-processor Objection”) containing the following information: Customer Entity Name Sub-processor Entity Name Grounds for Objection Requestor Name Requestor Email Objections must be based on legitimate data protection grounds in accordance with the terms of Contentsquare’s standard Data Processing Agreement. Get insights that transform Start for free Book a demo