Quorify

Sub-processor List

Version 1.1 · Last updated: August 28, 2026

In case of conflict between the two versions, the Romanian version prevails.

Third parties that process personal data on Quorify's behalf. For sub-processors outside the EEA, the transfer mechanism is the Standard Contractual Clauses (SCC) - Decision (EU) 2021/914.

Sub-processorRoleData processedHQTransferPolicy
SupabaseDatabase, auth, storageAll personal data, incl. encrypted CNPUE / EUSEE / EEAsupabase.com/privacy
Vercel Inc.Compute, CDN, edge (incl. country header for language)Request data, IPs, approximate countrySUA / USSCCvercel.com/legal/privacy-policy
ResendTransactional emailEmail, names, notification contentSUA / USSCCresend.com/legal/privacy-policy
UpstashRedis cache, rate limitingCached queries, rate-limit keys (IP)UE (Irlanda) / EU (Ireland)SEE / EEAupstash.com/trust/privacy.pdf
Google LLCOAuth, Analytics, Ads, Tag Manager, Search Console, Calendar, MeetOAuth identity, analytics/behavioral data, calendar/meeting dataSUA / USSCCpolicies.google.com/privacy
Microsoft CorporationOffice document rendering (preview)Document URLs and content during previewSUA / USSCCprivacy.microsoft.com
Cloudflare, Inc.Bot protection (Turnstile) on select public formsIP address, browser signals for bot verificationSUA / USSCCcloudflare.com/privacypolicy
Sentry (Functional Software, Inc.)Error & performance monitoringError reports, IPs; CNP/IBAN/secrets scrubbed before sendingUE (regiune EU) / EU regionSEE / EEAsentry.io/privacy
Stripe Inc.Payment processing, subscription billingCard data, billing data, transactionsSUA / USSCCstripe.com/privacy

Change notification. Adding a new sub-processor is notified to organizations at least 30 days in advance, per the DPA. Questions: contact@usequorify.com.