QorusDocs acquires Shark Finesse. Learn more
Last Modified: October 10th, 2025
The following sub-processors are used for the delivery of the QorusDocs system:
1. Microsoft Azure
Description | Details |
Subject matter of the processing |
Microsoft Azure is used as a Platform as a Service (PaaS) provider to host the solution. |
Duration of the processing |
The processing will occur for the duration of the Agreement plus 30 days. |
Nature and purposes of the processing |
Microsoft Azure is used as a Platform as a Service (PaaS) provider to host the solution. |
Type of Personal Data |
The data exporter will submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion. Personal data Processed by the Service includes the following categories of personal data:
At the Data Exporter’s discretion, personal data Processed by the Service may include the following categories of personal data:
Should the data exporter personnel share content with customers and prospects, their corporate email address shall be transferred. When electing to use QorusDocs AI, users may submit personal or other types of data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion. |
Categories of Data Subject |
The data exporter will submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion, and which may include personal data relating to the following categories of data subjects:
|
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Data is returned upon request from Data Exporter to Data Importer Help Desk within 7 days of termination of the Agreement. Data is deleted 30 days after the end of the Agreement. |
2. SendGrid
Description | Details |
Subject matter of the processing |
SendGrid is used to send emails such as task notifications, welcome messages, etc. from the data importer to the QorusDocs users. |
Duration of the processing |
The processing will occur for the duration of the Agreement plus 90 days. |
Nature and purposes of the processing |
Communication via email. |
Type of Personal Data |
First name, Last name, corporate email address. |
Categories of Data Subject | QorusDocs Users: the data exporter’s officers, employees, contractors (Personnel) who are natural persons |
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
No data is stored. Processing logs are retained and destroyed after 7 days. |
3. ChurnZero
Description | Details |
Subject matter of the processing |
Operationalize the customer lifecycle, manage customer risk, demonstrate value, drive expansion and advocacy, and enable cross-functional visibility. |
Duration of the processing |
The processing will occur for the duration of the Agreement plus 90 days. |
Nature and purposes of the processing |
Track and report on QorusDocs user behavior within the system including collection, recording, organization, structuring, storage, internal analytics, and reporting. Command Center, Health Scores, Customer Segmentation, Real-time Alerts, Customer Journeys, Plays & Automation, In-App Communications, Walkthroughs, Surveys, Reporting, Custom Dashboards, Account Insights, Collaboration Chatbots. |
Type of Personal Data |
ChurnZero Processes the following:
|
Categories of Data Subject | QorusDocs Users: the data exporter’s officers, employees, contractors (Personnel) who are natural persons |
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Data is preserved to analyze and improve our customer success plans and service delivery success. |
4. Zendesk
Description | Details |
Subject matter of the processing |
Zendesk is used as a customer service platform (helpdesk) to enable QorusDocs users to log issues and support requests. |
Duration of the processing |
The processing will occur for the duration of the Agreement. |
Nature and purposes of the processing |
When a QorusDocs hub is created, the hub name is used to create an organization instance in Zendesk. If a user clicks ‘help’ in QorusDocs and logs a support request, an SSO token with the user name and email address is transferred to Zendesk and a user account is created in Zendesk. Support requests logged by the users via the QorusDocs Help Center are processed and stored in Zendesk. The information included in the support tickets is determined and controlled by the users (data exporter) at the users’ (data exporter’s) sole discretion and may include personal data. |
Type of Personal Data |
Zendesk Processes the following types of personal data: QorusDocs user’s First Name, Last Name, and Corporate Email address. The information included in the support tickets is determined and controlled by the users (data exporter) at the users’ (data exporter’s) sole discretion and may include personal data.
|
Categories of Data Subject |
QorusDocs Users. |
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Data is preserved to verify Service Level Agreement fulfillment. The support tickets are also used as a source for product- design, -engineering, and service delivery improvements. |
5. DataDog
Description | Details |
Subject matter of the processing |
QorusDocs uses DataDog Log Management to unify logs and traces in a single view, to better analyze log data. |
Duration of the processing |
The processing will occur for the duration of the Agreement. |
Nature and purposes of the processing |
Log Management |
Type of Personal Data |
DataDog Processes the following types of personal data:
|
Categories of Data Subject |
QorusDocs Users. Prospect/customer personal data as used in the QorusDocs system, the extent of which is solely determined and controlled by the data exporter. This may include:
|
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Data is retained for 15 days after the termination of the service agreement. |
For specific integrations/setup with QorusDocs the following sub-processors may apply:
6. Microsoft SharePoint Online
Description | Details |
Subject matter of the processing |
For specific implementations, the customer may elect to have their content stored in an instance of Microsoft SharePoint Online that is provisioned and managed by QorusDocs. |
Duration of the processing |
The processing will occur for the duration of the Agreement plus 90 days. |
Nature and purposes of the processing |
Microsoft SharePoint Online is used as a secure place to store, organize, share, and access content (documents). |
Type of Personal Data |
The data exporter may submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion. |
Categories of Data Subject |
The data exporter may submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion. |
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Data is returned upon request from Data Exporter to Data Importer Help Desk within 7 days of termination of the Agreement. Data is deleted 30 days after the end of the Agreement. |
7. Tray.io
Description | Details |
Subject matter of the processing |
Specific implementations may include integration from QorusDocs to other Systems using Tray.io integration platform. |
Duration of the processing |
The processing will occur for the duration of the Agreement. |
Nature and purposes of the processing |
Tray.io is an integration platform that enables the transfer of data between QorusDocs and the data exporter‘s third party applications. With such integrations, the data exporter can enhance its process by creating workflows between QorusDocs and its other SaaS platforms for further process enhancements. The scope of such integrations are controlled by the data exporter. |
Type of Personal Data |
The data exporter may submit Personal Data to the Tray Subscription Services for Processing, the extent of which is determined and controlled by the data exporter in the data exporter’s discretion. |
Categories of Data Subject |
The data exporter may submit Personal Data to the Tray Subscription Services, the extent of which is determined and controlled by the data exporter and which may include, but is not limited to, Personal Data relating to the following categories of data subjects:
|
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Data is deleted 30 days after the end of the Agreement, except to the extent that Tray is required by any applicable law to retain some or all of the Personal Data. |
Shark Finesse
The following sub-processors are used for the delivery of the Shark Finesse product:
1. AWS
Description | Details |
Subject matter of the processing |
Amazon Simple Email Service is used to send email notifications from Shark Finesse. |
Duration of the processing |
The processing will occur for the duration of the Agreement. |
Nature and purposes of the processing |
Communication via email.
|
Type of Personal Data |
First name, Last name, corporate email address. |
Categories of Data Subject |
Shark Finesse users: the data exporter’s officers, employees, contractors (Personnel) who are natural persons |
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Data is deleted 30 days after the end of the Agreement. |
2. Google Firebase
Description | Details |
Subject matter of the processing |
Google Firebase is used to provide the app hosting, storage, databases, authentication and serverless functions. |
Duration of the processing |
The processing will occur for the duration of the Agreement plus 30 days. |
Nature and purposes of the processing |
Google Firebase is used to provide the app hosting, storage, databases, authentication and serverless functions. |
Type of Personal Data |
For the data exporter’s personnel: First Name and Last Name, Corporate Email Address, Authentication Identifiers, Profile Picture (where applicable) |
Categories of Data Subject |
The data exporter’s officers, employees, contractors (Personnel) who are natural persons. The data exporter’s customers and prospects who are natural persons. |
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Data is returned upon request from Data Exporter to Data Importer Help Desk within 7 days of termination of the Agreement. Data is deleted 30 days after the end of the Agreement. |
3. Auth0
Description | Details |
Subject matter of the processing |
Auth0 is used for user identity and access management. |
Duration of the processing |
The processing will occur for the duration of the Agreement plus 30 days. |
Nature and purposes of the processing |
Auth0 is used to authenticate users and provide secure single sign-on and access control to the Service.
|
Type of Personal Data |
For the data exporter’s personnel: First Name and Last Name, Corporate Email Address, Authentication Identifiers, Profile Picture (where applicable). |
Categories of Data Subject | The data exporter’s officers, employees, contractors (Personnel) who are natural persons. |
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Auth0 identity data is retained for the agreed period and permanently deleted within 30 days of termination of the Agreement. Return of data is not applicable due to the nature of the Service. |
4. LogRocket
Description | Details |
Subject matter of the processing |
LogRocket is used as a frontend logging, monitoring and analytics tool. |
Duration of the processing |
The processing will occur for the duration of the Agreement plus 30 days. |
Nature and purposes of the processing |
LogRocket is used to capture application usage, performance and error details to support service reliability and issue resolution.
|
Type of Personal Data |
For the data exporter’s personnel: Corporate Email Address (where used in session replay), IP address, browser/device metadata, interaction data within the Service. |
Categories of Data Subject |
The data exporter’s officers, employees, contractors (Personnel) who are natural persons. |
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
LogRocket session and log data is retained only for the agreed data retention period and is permanently deleted within 30 days of termination of the Agreement. Return of data is not applicable due to the nature of the Service. |
5. Cloudflare
Description | Details |
Subject matter of the processing |
Cloudflare is used as a web application firewall. |
Duration of the processing |
The processing will occur for the duration of the Agreement plus 30 days. |
Nature and purposes of the processing |
Cloudflare is used to protect against malicious traffic, ensure secure content delivery, and provide resilience and performance improvements for the Service. |
Type of Personal Data |
IP address, request headers, and other standard internet log information. |
Categories of Data Subject |
The data exporter’s officers, employees, contractors (Personnel) who are natural persons. |
Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data |
Cloudflare traffic and log data is retained only for the agreed data retention period and is permanently deleted within 30 days of termination of the Agreement. Return of data is not applicable due to the nature of the Service. |