The providers below are the third parties QA Mentor Inc. engages to process Customer Personal Data on its behalf when you use EvaliQA. Each one processes personal data only for the described service function, under a written contract with data protection obligations no less protective than our Data Processing Addendum.
This list reflects the generally authorized sub-processors set out in Annex III of the DPA. QA Mentor maintains a current list with the applicable contracting entity, functions, and processing locations, and provides it to Customer on request.
Additions or replacements of a sub-processor follow the 30-day notice in the DPA: customers with a signed DPA are notified in writing at least thirty (30) days before an intended change and may object on reasonable data-protection grounds during that period. The date at the top of this page changes whenever the list does.
Questions about this list can be sent to support@qamentor.com.
Sub-processors that process Customer Personal Data
| Provider | Function | When applicable | Location |
|---|
| Hetzner Online GmbH | Hosting, storage, database and infrastructure | Core service | United States |
| OpenAI, L.L.C. | Model processing for customer-requested evaluations | Platform model feature | United States |
| Twilio Inc. | Telephony and media processing for voice evaluations | Voice feature | United States |
| Resend, Inc. | Delivery of service messages containing Customer Personal Data | Only if that notification feature is enabled | United States |
Independent service providers
Payment processing and website or product analytics are separate account and business operations under Section 2.3 of the DPA. QA Mentor does not disclose Customer Evaluation Data to payment or analytics providers for those purposes.
| Provider | Function | When applicable | Location |
|---|
| Stripe, Inc. and Stripe Payments Europe, Ltd. | Payment processing | Billing | United States and Ireland |
| Google LLC | Website and product analytics (Google Analytics) | Analytics when enabled | United States |
Customer-connected AI providers
Where Customer connects a third-party AI provider using Customer-supplied credentials, the provider's legal role depends on the applicable contracts, instructions, and data flow. If QA Mentor engages that provider to Process Customer Personal Data on its behalf, QA Mentor will treat it as a Sub-processor and give notice under Section 7.3. If Customer contracts directly with the provider and directs a separate transfer, Customer is responsible for that provider relationship and any required transfer mechanism. Supplying credentials alone does not determine the provider's role.
