QEHSTrust Center
Sub-processors
The third parties we engage to process customer data, and what each one does. We give at least 30 days' notice before adding or replacing a sub-processor, subscribe below to receive those notifications.
Last updated: 2026-05-14 · RSS feed
| Name | Purpose | Data categories | Region | Added |
|---|---|---|---|---|
| Stripe | Payment processing and subscription billing | Billing contact, Payment-card metadata (tokenised by Stripe), Invoice history | Ireland and United States (global payment network) | 2026-05-14 |
| Hostinger | Virtual private server hosting (production application + database) and managed mailbox | All Customer Data hosted on the production database, Transactional mailbox data | European Union (Lithuania) and United States | 2026-05-14 |
| Postmark (Wildbit / ActiveCampaign) | Transactional email delivery (account verification, password reset, notifications) | Recipient email address, Message subject, Message body, Delivery metadata | United States | 2026-05-14 |
| Amazon Web Services (S3) | Object storage for file attachments and exports | Uploaded files, Attachments, Tenant exports | United States (EU-region option planned for Enterprise) | 2026-05-14 |
| Spaceship | Domain registrar and authoritative DNS | Domain registration metadata only (no Customer Data) | United States | 2026-05-14 |
| SigNoz (self-hosted) | Application observability — traces, logs, metrics. Operated by QEHS on its own infrastructure. | Operational telemetry, Error payloads | Same infrastructure as the production application (United States at launch) | 2026-05-14 |
| Chatwoot (self-hosted) | Customer support inbox. Operated by QEHS on its own infrastructure. | Support correspondence, Contact metadata | Same infrastructure as the production application (United States at launch) | 2026-05-14 |
| Cal.com (self-hosted) | Sales-call scheduling. Operated by QEHS on its own infrastructure. | Prospect name, Prospect email, Booking metadata | Same infrastructure as the production application (United States at launch) | 2026-05-14 |
| Anthropic | AI features — reasoning, extraction, summarisation (Phase 10, Enterprise opt-in) | Feature-specific content (customer opt-in only) | United States — zero-retention API mode | Planned — not engaged. 30-day prior notice will precede activation. |
| OpenAI | AI features — summarisation, classification (Phase 10, Enterprise opt-in) | Feature-specific content (customer opt-in only) | United States — zero-retention API mode | Planned — not engaged. 30-day prior notice will precede activation. |
Get notified of changes
New sub-processors and replacements are announced at least 30 days before going live. Enter your work email, we'll send a confirmation first, then only the change notifications you asked for.
Prefer machine-readable? Use the RSS feed or email hello@qehsethos.com.