Compliance

Sub-processor register

These providers may process personal data on QNSET’s behalf to operate, protect, and deliver our services. Deployment-specific providers are confirmed before they process customer data.

Last reviewed
  • 4providers
  • 1active today
  • 2chosen per deployment
  • 0analytics providers
  1. 01

    Edge and security

    Cloudflare, Inc.

    Active
    Purpose
    Edge delivery, TLS termination, web application firewall, rate limiting, and Turnstile bot protection.
    Region
    Global edge network.
    Data processed
    Visitor IP address, browser headers, request URL, and CAPTCHA verification token. Cloudflare does not receive QNSET account names or email addresses through Turnstile.
    Safeguards
    Standard Contractual Clauses and Cloudflare’s GDPR Data Processing Addendum.
  2. 02

    Infrastructure

    Customer-selected hosting provider

    Deployment-specific
    Purpose
    Hosts the application, PostgreSQL database, persistent storage, and encrypted backups.
    Region
    The customer-selected region. EU deployments keep application data in an approved EU region unless the customer explicitly configures otherwise.
    Data processed
    Application data needed to provide the service, including account details, inquiry records, security logs, and encrypted credentials.
    Safeguards
    An Article 28 data-processing agreement is required before production use. Cross-border transfers require an approved transfer mechanism.
  3. 03

    Email delivery

    Customer-selected SMTP provider

    When configured
    Purpose
    Delivers account confirmation, password reset, security-code, and service-notification emails.
    Region
    Provider-specific and documented for the deployment.
    Data processed
    Recipient email address, subject, and message body, which may contain a short-lived transactional token.
    Safeguards
    A GDPR-compliant data-processing agreement is required. Standard Contractual Clauses are used where applicable.
  4. 04

    Domain services

    Domain registrar and DNS provider

    Provider-specific
    Purpose
    Maintains the qnset.com registration and DNS records needed to direct visitors to the service.
    Region
    Provider-specific.
    Data processed
    Registrar-side domain contact information. This provider does not receive QNSET application account data through the registrar relationship.
    Safeguards
    The provider’s applicable privacy terms and data-processing agreement.

Analytics

No analytics sub-processors are currently engaged.

QNSET does not deploy analytics or marketing cookies by default. If that changes, the provider and its processing scope will be published here before use, and consent will be requested where required.

Changes and objections

Hear about changes before they happen

We give at least 30 days’ notice before engaging a new sub-processor or materially changing an existing engagement. Customers may object during that notice period.

Subscribe to change notices Read the Privacy Policy