Security, Privacy, and Architecture Documentation
Scope
This documentation lists the infrastructure environment and sub-processors material to the QUE Services in the table below. Capitalized terms used in this documentation are defined in Dataclay’s Terms of Service and/or Data Processing Addendum.
The QUE Services are fully hosted on third party infrastructures, which operate as Dataclay’s sub-processors.
Sub-processors Storing Customer Data
Currently, the Dataclay and third-party production systems used to provide the QUE Services are located in facilities in the United States. Customer accounts are established in one of these three regions based on where the customer subscribes to the QUE Services. Except as set forth in the “Additional Details” column in the table below, if a sub-processor is located in your region, your Customer Data for that sub-processor will be stored within your region. Otherwise, your Customer Data will be stored in the United States. You may also request to have your Customer Data hosted in a different region, which may be accommodated, subject to availability. If you have any questions about where your data is stored that this Documentation does not answer, please contact Customer Support.
In addition to the locations identified in the table below, Dataclay may store across its data storage locations identifying information about Customer’s instance(s) and identifying information about Users for the purpose of operating the Services, such as facilitating the login process and the provision of customer support.
Infrastructure and Sub-processor Table
Name of Service | Subprocessors | Purpose of Processing | Location of Subprocessors | Additional Details |
---|---|---|---|---|
QUE Services | Amazon Web Services | Third party hosting provider | United States | |
QUE Services | MongoDB | Dataclay QUE utilizes a MongoDB database which is deployed into the AWS infrastructure by way of MongoDB’s platform service known as Cloud Atlas. This service provides additional layers of security beyond any base security measures that AWS . For example, Cloud Atlas allows only specific machine Ips to access any database, known as “IP Whitelisting”. | United States | |
QUE Services | Auth0 | End user account management platform. All user data is stored with Auth0 | United States | |
QUE Services | Mailchimp | Emailing end-users notifications of alerts regarding their account information and data | United States | |
QUE Services | FastSpring | User subscription and payment information is stored securely with FastSpring. FastSpring acts as an authorized Dataclay reseller. | United States |