# HqO

HqO (hqo.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/hqo
- Documents last verified: 2026-09-29
- Transparency rating: 85/100 (how much it publishes, not how secure it is)
- Cite as: HqO, Third Party Index, https://thirdpartyindex.com/vendors/hqo (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.hqo.com/trust-and-security/ | 2026-09-29 | 2026-09-29 |
| Subprocessor list | https://www.hqo.com/wp-content/uploads/2023/12/HqO-Data-Processing-Addendum\_-10.23.23\_-Definitions-Update.pdf#subprocessors | 2026-09-29 | 2026-09-29 |
| Data processing addendum | https://www.hqo.com/wp-content/uploads/2023/12/HqO-Data-Processing-Addendum\_-10.23.23\_-Definitions-Update.pdf | 2026-09-29 | 2026-09-29 |
| Privacy policy | https://www.hqo.com/legal/privacy-policy/ | 2026-09-29 | 2026-09-29 |
| Terms | https://www.hqo.com/wp-content/uploads/2021/12/8-19-21-hqo-terms-and-conditions-of-use.pdf | 2026-09-29 | 2026-09-29 |
| security.txt | https://www.hqo.com/.well-known/security.txt | 2026-09-29 | 2026-09-29 |

## Subprocessors (6)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | AWS is our hosting environment and our user database is stored in RDS (Amazon Aurora/MySQL). All user data is stored in AWS. All of our AWS services are hosted on a production VPC and are inaccessible to any traffic directly. | United States, EU | 2026-09-29 |
| [Braze](https://thirdpartyindex.com/vendors/braze.md) | Braze will send push notifications and emails to users, and stores a user’s full name and email address. | United States, EU | 2026-09-29 |
| [LaunchDarkly](https://thirdpartyindex.com/vendors/launchdarkly.md) | LaunchDarkly is used to A/B test features in our web dashboard (aka the “admin panel”). Access to the web dashboard is limited to a handful of customers per property. This is generally a very small subset of users. LaunchDarkly receives a user’s full name and email address. | United States | 2026-09-29 |
| [Looker](https://thirdpartyindex.com/vendors/looker.md) | Looker is a business intelligence software and big data analytics platform that we use to make sense of our usage analytics data. | United States, EU | 2026-09-29 |
| [Spreedly](https://thirdpartyindex.com/vendors/spreedly.md) | Spreedly is our tokenizer solution for payment | United States, EU | 2026-09-29 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Stripe is our payment processor. This affects any user who use our Order Ahead functionality and enter their payment information into the Stripe SDK. | United States, EU | 2026-09-29 |

Read from ([evidence](https://thirdpartyindex.com/evidence/18004)). CSV: https://thirdpartyindex.com/vendors/hqo/subprocessors.csv

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Security contact

From its security.txt (https://www.hqo.com/.well-known/security.txt):

- Contact: mailto:security@hqo.co

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api