QorusDocs Authorized Sub-processors

Microsoft Azure is used as a Platform as a Service (PaaS) provider to host the solution.

The processing will occur for the duration of the Agreement plus 30 days.

Microsoft Azure is used as a Platform as a Service (PaaS) provider to host the solution.

The data exporter will submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion.

Personal data Processed by the Service includes the following categories of personal data:  

• for the data exporter’s Personnel:  First name Last name, Corporate email address, Country of residence, and time zone.

At the Data Exporter’s discretion, personal data Processed by the Service may include the following categories of personal data:  

• for the data exporter’s customers and prospects: Content created with Qorus may contain prospect/customer personal data, the extent of which is solely determined and controlled by the data exporter.

Should the data exporter personnel share content with customers and prospects, their corporate email address shall be transferred.

When electing to use QorusDocs AI, users may submit personal or other types of data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion. 

The data exporter will submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion, and which may include personal data relating to the following categories of data subjects:  

• the data exporter’s officers, employees, contractors (Personnel) who are natural persons
• the data exporter’s customers, prospects who are natural persons
  

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is returned upon request from Data Exporter to Data Importer Help Desk within 7 days of termination of the Agreement.  Data is deleted 30 days after the end of the Agreement.

SendGrid is used to send emails such as task notifications, welcome messages, etc. from the data importer to the QorusDocs users.

The processing will occur for the duration of the Agreement plus 90 days.

Communication via email.

First name, Last name, corporate email address. 

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

No data is stored. Processing logs are retained and destroyed after 7 days.

Operationalize the customer lifecycle, manage customer risk, demonstrate value, drive expansion and advocacy, and enable cross-functional visibility.

The processing will occur for the duration of the Agreement plus 90 days.

Track and report on QorusDocs user behavior within the system including collection, recording, organization, structuring, storage, internal analytics, and reporting.

Command Center, Health Scores, Customer Segmentation, Real-time Alerts, Customer Journeys, Plays & Automation, In-App Communications, Walkthroughs, Surveys, Reporting, Custom Dashboards, Account Insights, Collaboration Chatbots.

ChurnZero Processes the following:

• User First Name, Last Name Email address, Geolocation.
• User Job Title and Department (if available in Azure Active Directory).
• Support requests (tickets) stored and processed in Zendesk are synchronized into ChurnZero. The information included in the support tickets is determined and controlled by the data exporter at the data exporter’s sole discretion and may include personal data.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is preserved to analyze and improve our customer success plans and service delivery success.

Zendesk is used as a customer service platform (helpdesk) to enable QorusDocs users to log issues and support requests.

The processing will occur for the duration of the Agreement.

When a QorusDocs hub is created, the hub name is used to create an organization instance in Zendesk.

If a user clicks ‘help’ in QorusDocs and logs a support request, an SSO token with the user name and email address is transferred to Zendesk and a user account is created in Zendesk.

Support requests logged by the users via the QorusDocs Help Center are processed and stored in Zendesk.

The information included in the support tickets is determined and controlled by the users (data exporter) at the users’ (data exporter’s) sole discretion and may include personal data.

Zendesk Processes the following types of personal data:

QorusDocs user’s First Name, Last Name, and Corporate Email address.

The information included in the support tickets is determined and controlled by the users (data exporter) at the users’ (data exporter’s) sole discretion and may include personal data.

QorusDocs Users.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is preserved to verify Service Level Agreement fulfillment. The support tickets are also used as a source for product- design, -engineering, and service delivery improvements.

QorusDocs uses DataDog Log Management to unify logs and traces in a single view, to better analyze log data.

The processing will occur for the duration of the Agreement.

Log Management

DataDog Processes the following types of personal data:

• QorusDocs user activity and event data that may contain:
  • QorusDocs user’s First Name, Last Name, and Corporate Email address.
  • Prospect/customer personal data as used in the QorusDocs system, the extent of which is solely determined and controlled by the data exporter.
    

QorusDocs Users.

Prospect/customer personal data as used in the QorusDocs system, the extent of which is solely determined and controlled by the data exporter. This may include:

• the data exporter’s officers, employees, contractors (Personnel) who are natural persons  
• the data exporter’s customers, prospects who are natural persons

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is retained for 15 days after the termination of the service agreement.

For specific implementations, the customer may elect to have their content stored in an instance of Microsoft SharePoint Online that is provisioned and managed by QorusDocs. 

The processing will occur for the duration of the Agreement plus 90 days.

Microsoft SharePoint Online is used as a secure place to store, organize, share, and access content (documents).

The data exporter may submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion.

The data exporter may submit personal data to the Service, the extent of which will be determined and controlled by the data exporter in the data exporter’s sole discretion.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is returned upon request from Data Exporter to Data Importer Help Desk within 7 days of termination of the Agreement.  Data is deleted 30 days after the end of the Agreement.

Specific implementations may include integration from QorusDocs to other Systems using Tray.io integration platform.

The processing will occur for the duration of the Agreement.

Tray.io is an integration platform that enables the transfer of data between QorusDocs and the data exporter‘s third party applications.

With such integrations, the data exporter can enhance its process by creating workflows between QorusDocs and its other SaaS platforms for further process enhancements. The scope of such integrations are controlled by the data exporter.

The data exporter may submit Personal Data to the Tray Subscription Services for Processing, the extent of which is determined and controlled by the data exporter in the data exporter’s discretion.

The data exporter may submit Personal Data to the Tray Subscription Services, the extent of which is determined and controlled by the data exporter and which may include, but is not limited to, Personal Data relating to the following categories of data subjects:

• the data exporter’s officers, employees, contractors (Personnel) who are natural persons  
• the data exporter’s customers, prospects who are natural persons
  

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is deleted 30 days after the end of the Agreement, except to the extent that Tray is required by any applicable law to retain some or all of the Personal Data.

Amazon Simple Email Service is used to send email notifications from Shark Finesse.

The processing will occur for the duration of the Agreement.

Communication via email. 

First name, Last name, corporate email address.

Shark Finesse users: the data exporter’s officers, employees, contractors (Personnel) who are natural persons  

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is deleted 30 days after the end of the Agreement.

Google Firebase is used to provide the app hosting, storage, databases, authentication and serverless functions.

The processing will occur for the duration of the Agreement plus 30 days.

Google Firebase is used to provide the app hosting, storage, databases, authentication and serverless functions.

For the data exporter’s personnel: First Name and Last Name, Corporate Email Address, Authentication Identifiers, Profile Picture (where applicable)

For the data exporter’s customers and prospects: Content created with the Service may contain prospect/customer personal data, the extent of which is solely determined and controlled by the data exporter.

 The data exporter’s officers, employees, contractors (Personnel) who are natural persons.

 The data exporter’s customers and prospects who are natural persons.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Data is returned upon request from Data Exporter to Data Importer Help Desk within 7 days of termination of the Agreement.  Data is deleted 30 days after the end of the Agreement. 

Auth0 is used for user identity and access management.

The processing will occur for the duration of the Agreement plus 30 days.

Auth0 is used to authenticate users and provide secure single sign-on and access control to the Service.

For the data exporter’s personnel: First Name and Last Name, Corporate Email Address, Authentication Identifiers, Profile Picture (where applicable).

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Auth0 identity data is retained for the agreed period and permanently deleted within 30 days of termination of the Agreement. Return of data is not applicable due to the nature of the Service.

LogRocket is used as a frontend logging, monitoring and analytics tool.

The processing will occur for the duration of the Agreement plus 30 days.

LogRocket is used to capture application usage, performance and error details to support service reliability and issue resolution.

For the data exporter’s personnel: Corporate Email Address (where used in session replay), IP address, browser/device metadata, interaction data within the Service.

The data exporter’s officers, employees, contractors (Personnel) who are natural persons.
Potentially, the data exporter’s customers and prospects if their data is visible in the application at the time of session recording.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

LogRocket session and log data is retained only for the agreed data retention period and is permanently deleted within 30 days of termination of the Agreement. Return of data is not applicable due to the nature of the Service.

Cloudflare is used as a web application firewall.

The processing will occur for the duration of the Agreement plus 30 days.

Cloudflare is used to protect against malicious traffic, ensure secure content delivery, and provide resilience and performance improvements for the Service.

IP address, request headers, and other standard internet log information.

The data exporter’s officers, employees, contractors (Personnel) who are natural persons.
The data exporter’s customers and prospects who are natural persons.

Plan for return and destruction of the data once the processing is complete UNLESS requirement under union or member state law to preserve that type of data

Cloudflare traffic and log data is retained only for the agreed data retention period and is permanently deleted within 30 days of termination of the Agreement. Return of data is not applicable due to the nature of the Service.