Skip to main content

QorusDocs acquires Shark Finesse. Learn more

QorusDocs Authorized Sub-processors

Last Modified:  October 10th, 2025 

The following sub-processors are used for the delivery of the QorusDocs system:

  1. Microsoft Azure
  2. SendGrid
  3. ChurnZero
  4. Zendesk
  5. DataDog

 

1. Microsoft Azure

Description Details
Subject matter of the processing

Microsoft Azure is used as a Platform as a Service (PaaS) provider to host the solution.

Duration of the processing

The processing will occur for the duration of the Agreement plus 30 days.

Nature and purposes of the processing

Microsoft Azure is used as a Platform as a Service (PaaS) provider to host the solution.

Type of Personal Data

The data exporter will submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion.

Personal data Processed by the Service includes the following categories of personal data:  

  • for the data exporter’s Personnel:  First name Last name, Corporate email address, Country of residence, and time zone.

At the Data Exporter’s discretion, personal data Processed by the Service may include the following categories of personal data:  

  • for the data exporter’s customers and prospects: Content created with Qorus may contain prospect/customer personal data, the extent of which is solely determined and controlled by the data exporter.

Should the data exporter personnel share content with customers and prospects, their corporate email address shall be transferred.

When electing to use QorusDocs AI, users may submit personal or other types of data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion. 

Categories of Data Subject

The data exporter will submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion, and which may include personal data relating to the following categories of data subjects:  

  • the data exporter’s officers, employees, contractors (Personnel) who are natural persons
  • the data exporter’s customers, prospects who are natural persons

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is returned upon request from Data Exporter to Data Importer Help Desk within 7 days of termination of the Agreement.  Data is deleted 30 days after the end of the Agreement.

 

2. SendGrid

Description Details
Subject matter of the processing

SendGrid is used to send emails such as task notifications, welcome messages, etc. from the data importer to the QorusDocs users.

Duration of the processing

The processing will occur for the duration of the Agreement plus 90 days.

Nature and purposes of the processing

Communication via email.

Type of Personal Data

First name, Last name, corporate email address. 

Categories of Data Subject QorusDocs Users: the data exporter’s officers, employees, contractors (Personnel) who are natural persons

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

No data is stored. Processing logs are retained and destroyed after 7 days.

 

 

3. ChurnZero

Description Details
Subject matter of the processing

Operationalize the customer lifecycle, manage customer risk, demonstrate value, drive expansion and advocacy, and enable cross-functional visibility.

Duration of the processing

The processing will occur for the duration of the Agreement plus 90 days.

Nature and purposes of the processing

Track and report on QorusDocs user behavior within the system including collection, recording, organization, structuring, storage, internal analytics, and reporting.

Command Center, Health Scores, Customer Segmentation, Real-time Alerts, Customer Journeys, Plays & Automation, In-App Communications, Walkthroughs, Surveys, Reporting, Custom Dashboards, Account Insights, Collaboration Chatbots.

Type of Personal Data

ChurnZero Processes the following:

  • User First Name, Last Name Email address, Geolocation.
  • User Job Title and Department (if available in Azure Active Directory).
  • Support requests (tickets) stored and processed in Zendesk are synchronized into ChurnZero. The information included in the support tickets is determined and controlled by the data exporter at the data exporter’s sole discretion and may include personal data.
Categories of Data Subject QorusDocs Users: the data exporter’s officers, employees, contractors (Personnel) who are natural persons  

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is preserved to analyze and improve our customer success plans and service delivery success.

 

4. Zendesk

Description Details
Subject matter of the processing

Zendesk is used as a customer service platform (helpdesk) to enable QorusDocs users to log issues and support requests.

Duration of the processing

The processing will occur for the duration of the Agreement.

Nature and purposes of the processing

When a QorusDocs hub is created, the hub name is used to create an organization instance in Zendesk.

If a user clicks ‘help’ in QorusDocs and logs a support request, an SSO token with the user name and email address is transferred to Zendesk and a user account is created in Zendesk.

Support requests logged by the users via the QorusDocs Help Center are processed and stored in Zendesk.

The information included in the support tickets is determined and controlled by the users (data exporter) at the users’ (data exporter’s) sole discretion and may include personal data.

Type of Personal Data

Zendesk Processes the following types of personal data:

QorusDocs user’s First Name, Last Name, and Corporate Email address.

The information included in the support tickets is determined and controlled by the users (data exporter) at the users’ (data exporter’s) sole discretion and may include personal data.

 

Categories of Data Subject

QorusDocs Users.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is preserved to verify Service Level Agreement fulfillment. The support tickets are also used as a source for product- design, -engineering, and service delivery improvements.

 

5. DataDog

Description Details
Subject matter of the processing

QorusDocs uses DataDog Log Management to unify logs and traces in a single view, to better analyze log data.

Duration of the processing

The processing will occur for the duration of the Agreement.

Nature and purposes of the processing

Log Management

Type of Personal Data

DataDog Processes the following types of personal data:

  • QorusDocs user activity and event data that may contain:
    • QorusDocs user’s First Name, Last Name, and Corporate Email address.
    • Prospect/customer personal data as used in the QorusDocs system, the extent of which is solely determined and controlled by the data exporter.
Categories of Data Subject

QorusDocs Users.

Prospect/customer personal data as used in the QorusDocs system, the extent of which is solely determined and controlled by the data exporter. This may include:

  • the data exporter’s officers, employees, contractors (Personnel) who are natural persons  
  • the data exporter’s customers, prospects who are natural persons

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is retained for 15 days after the termination of the service agreement.

 

For specific integrations/setup with QorusDocs the following sub-processors may apply:

  1. Customers may elect to have their content stored in an instance of Microsoft SharePoint Online provisioned by QorusDocs. In such a case Microsoft SharePoint Online will be a sub-processor.
  2. If the Service Agreement includes integration from QorusDocs to other Systems through the Tray.io integration layer, Tray.io will be a sub-processor.

 

6. Microsoft SharePoint Online

Description Details
Subject matter of the processing

For specific implementations, the customer may elect to have their content stored in an instance of Microsoft SharePoint Online that is provisioned and managed by QorusDocs. 

Duration of the processing

The processing will occur for the duration of the Agreement plus 90 days.

Nature and purposes of the processing

Microsoft SharePoint Online is used as a secure place to store, organize, share, and access content (documents).

Type of Personal Data

The data exporter may submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion.

Categories of Data Subject

The data exporter may submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is returned upon request from Data Exporter to Data Importer Help Desk within 7 days of termination of the Agreement.  Data is deleted 30 days after the end of the Agreement.

 

7. Tray.io

Description Details
Subject matter of the processing

Specific implementations may include integration from QorusDocs to other Systems using Tray.io integration platform.

Duration of the processing

The processing will occur for the duration of the Agreement.

Nature and purposes of the processing

Tray.io is an integration platform that enables the transfer of data between QorusDocs and the data exporter‘s third party applications.

With such integrations, the data exporter can enhance its process by creating workflows between QorusDocs and its other SaaS platforms for further process enhancements. The scope of such integrations are controlled by the data exporter.

Type of Personal Data

The data exporter may submit Personal Data to the Tray Subscription Services for Processing, the extent of which is determined and controlled by the data exporter in the data exporter’s discretion.

Categories of Data Subject

The data exporter may submit Personal Data to the Tray Subscription Services, the extent of which is determined and controlled by the data exporter and which may include, but is not limited to, Personal Data relating to the following categories of data subjects:

  • the data exporter’s officers, employees, contractors (Personnel) who are natural persons  
  • the data exporter’s customers, prospects who are natural persons

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is deleted 30 days after the end of the Agreement, except to the extent that Tray is required by any applicable law to retain some or all of the Personal Data.

 

Shark Finesse

The following sub-processors are used for the delivery of the Shark Finesse product:

  1. AWS
  2. Google Firebase
  3. Auth0
  4. LogRocket
  5. Cloudflare

 

1. AWS

Description Details
Subject matter of the processing

Amazon Simple Email Service is used to send email notifications from Shark Finesse.

Duration of the processing

The processing will occur for the duration of the Agreement.

Nature and purposes of the processing

Communication via email. 

 

Type of Personal Data

First name, Last name, corporate email address.

Categories of Data Subject

Shark Finesse users: the data exporter’s officers, employees, contractors (Personnel) who are natural persons  

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is deleted 30 days after the end of the Agreement.

 

2. Google Firebase

Description Details
Subject matter of the processing

Google Firebase is used to provide the app hosting, storage, databases, authentication and serverless functions.

Duration of the processing

The processing will occur for the duration of the Agreement plus 30 days.

Nature and purposes of the processing

Google Firebase is used to provide the app hosting, storage, databases, authentication and serverless functions.

Type of Personal Data

For the data exporter’s personnel: First Name and Last Name, Corporate Email Address, Authentication Identifiers, Profile Picture (where applicable)

For the data exporter’s customers and prospects: Content created with the Service may contain prospect/customer personal data, the extent of which is solely determined and controlled by the data exporter.

Categories of Data Subject

 The data exporter’s officers, employees, contractors (Personnel) who are natural persons.

 The data exporter’s customers and prospects who are natural persons.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is returned upon request from Data Exporter to Data Importer Help Desk within 7 days of termination of the Agreement.  Data is deleted 30 days after the end of the Agreement. 


 

3. Auth0

Description Details
Subject matter of the processing

Auth0 is used for user identity and access management.

Duration of the processing

The processing will occur for the duration of the Agreement plus 30 days.

Nature and purposes of the processing

Auth0 is used to authenticate users and provide secure single sign-on and access control to the Service.

 

Type of Personal Data

For the data exporter’s personnel: First Name and Last Name, Corporate Email Address, Authentication Identifiers, Profile Picture (where applicable).

Categories of Data Subject The data exporter’s officers, employees, contractors (Personnel) who are natural persons.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Auth0 identity data is retained for the agreed period and permanently deleted within 30 days of termination of the Agreement. Return of data is not applicable due to the nature of the Service.

 

 

4. LogRocket

Description Details
Subject matter of the processing

LogRocket is used as a frontend logging, monitoring and analytics tool.

Duration of the processing

The processing will occur for the duration of the Agreement plus 30 days.

Nature and purposes of the processing

LogRocket is used to capture application usage, performance and error details to support service reliability and issue resolution.

 

Type of Personal Data

For the data exporter’s personnel: Corporate Email Address (where used in session replay), IP address, browser/device metadata, interaction data within the Service.

Categories of Data Subject

The data exporter’s officers, employees, contractors (Personnel) who are natural persons.
Potentially, the data exporter’s customers and prospects if their data is visible in the application at the time of session recording.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

LogRocket session and log data is retained only for the agreed data retention period and is permanently deleted within 30 days of termination of the Agreement. Return of data is not applicable due to the nature of the Service.


 

5. Cloudflare

Description Details
Subject matter of the processing

Cloudflare is used as a web application firewall.

Duration of the processing

The processing will occur for the duration of the Agreement plus 30 days.

Nature and purposes of the processing

Cloudflare is used to protect against malicious traffic, ensure secure content delivery, and provide resilience and performance improvements for the Service.

Type of Personal Data

IP address, request headers, and other standard internet log information.

Categories of Data Subject

The data exporter’s officers, employees, contractors (Personnel) who are natural persons.
The data exporter’s customers and prospects who are natural persons.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Cloudflare traffic and log data is retained only for the agreed data retention period and is permanently deleted within 30 days of termination of the Agreement. Return of data is not applicable due to the nature of the Service.