Subprocessors
Last updated: September 2, 2026
A subprocessor is a third-party company that processes personal data on QuantRidge's behalf so that we can run the Service. The table below is the complete list — every provider that receives customer or visitor data, what it does, what categories of data it can receive, where it processes them, and a link to its own privacy policy and terms.
We publish this because a vague list is worse than none. If a provider is not on this page, it does not receive your data.
30 days' notice
We publish new subprocessors here at least 30 days before they begin processing.
Right to object
Business customers under a DPA may object on reasonable data-protection grounds.
Contractually bound
Each provider is under written terms no less protective than our own commitments.
Infrastructure & hosting
Vercel
Vercel Inc.
- Purpose
- Hosts quantridge.net, serves the site from its edge network, runs the site's serverless functions, and provides aggregate traffic analytics.
- Data it can receive
- IP address, request metadata, browser and device information, page URLs, and anything submitted through a form on the site.
- Processing location
- United States (global edge network)
Render
Render Services, Inc.
- Purpose
- Hosts the QuantRidge application API and the managed PostgreSQL database backing sessions and application records.
- Data it can receive
- Account identifiers, authentication and session records, application data you create in the product, and server logs.
- Processing location
- United States
MongoDB Atlas
MongoDB, Inc.
- Purpose
- Managed database service storing account records and application data.
- Data it can receive
- Account information, product data you create or upload, and associated metadata.
- Processing location
- United States
Payments
Stripe
Stripe, Inc.
- Purpose
- Subscription billing, payment processing, invoicing, and payment fraud prevention.
- Data it can receive
- Name, email address, billing address, subscription and transaction history, and partial card details.
- Processing location
- United States
- Note
- Full payment card numbers are submitted directly to Stripe and never reach QuantRidge systems. Stripe acts as an independent controller for the payment data it collects, under its own privacy policy.
Communications
Resend
- Purpose
- Delivers transactional email — account verification, password resets, billing notices, and replies to messages you send us.
- Data it can receive
- Name, email address, and the contents of the message being sent.
- Processing location
- United States
Thunderbolt
- Purpose
- Provides the customer-support chat widget embedded on the public site, and stores the conversations held through it.
- Data it can receive
- Anything you type into the chat widget, plus the name and email you give it, your IP address, and the page you started the chat from.
- Processing location
- United States
- Note
- The widget loads on every page of the public site. Please do not type account numbers, passwords, or government identifiers into a support chat.
AI & machine learning
Groq
Groq, Inc.
- Purpose
- Runs the language model behind the Ask QuantRidge assistant and the in-product support assistant.
- Data it can receive
- The text of the message you send to an assistant, plus the recent turns of that conversation.
- Processing location
- United States
- Note
- The assistants are grounded in published product documentation. No account records, portfolio data, customer lists, or source code are placed in the model context, and assistant conversations are not used to train any model.
Analytics & marketing
Google Analytics
Google LLC
- Purpose
- Measures marketing-site traffic and how visitors move through the public pages.
- Data it can receive
- Truncated IP address, cookie and device identifiers, pages viewed, referrer, and approximate location.
- Processing location
- United States and other countries where Google operates
- Note
- Runs on the public marketing site only, not inside the signed-in product.
Apollo.io
- Purpose
- Website visitor analytics used to understand which organizations show interest in QuantRidge for business outreach.
- Data it can receive
- IP address, pages viewed, referrer, and business-firmographic inferences Apollo draws from them.
- Processing location
- United States
- Note
- Runs on the public marketing site only. This is the tracker most directly addressed by a Global Privacy Control signal — see Your Privacy Choices.
Changes to this list
We will publish an updated list on this page at least 30 days before a new subprocessor begins processing personal data, except where we must replace a provider sooner to keep the Service secure or available — in which case we will post the change as soon as reasonably practicable.
Business customers operating under our Data Processing Agreement may object to a new subprocessor on reasonable grounds relating to data protection by writing to support@quantridge.net within 30 days of the change being posted. We will work with you in good faith to address the objection; if we cannot, you may terminate the affected subscription without penalty for the remainder of the paid term.
To be notified by email whenever this list changes, write to support@quantridge.net with the subject "Subscribe to subprocessor updates".
QuantRidge does not sell personal information, and no provider on this list is permitted to use your data for its own purposes except where noted above. Links point to each provider's own current policies, which they control and may change. For how we use data ourselves, see the Privacy policy; for how it is protected, see Security.