QS Sub-Processor List

Last updated: 15th March 2024

‍

QS Quacquarelli Symonds Ltd (“QS,” “we,” or “our”) and its affiliates and subsidiaries (“Group Companies”) may engage and use certain third-party data processors (“Sub-Processors”) to provide services to our customers. These Sub-Processors may have access to personal data provided directly by our clients or to which we may have access in order to perform the contracted services or to enable requested features related thereto (“Client Data”). This page provides important information about the identity, location and role of each Sub-Processor. Terms used on this page but not defined have the meaning set forth itelen the General Terms and Conditions or superseding written agreement between QS and its Clients (the “Agreement”).

We currently use the below list of Sub-Processors to provide our services, infrastructure, customer support, service administration services, and email notifications. Please note that not all Sub-Processors are used in the provision of all services we provide and some may only be involved in assisting with the provision of specific services.

‍

QS Reputation Manager | MoveIN Specific Sub-Processors

Company name	Place of data processing	Purpose	Safeguard measures
Telemaxx Telecommunikation GmbH	Germany	Hosting Provider	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
OVH Groupe SA	France	Offsite Backup	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
Amazon Web Services, Inc (AWS) – Legal Name: Amazon Web Services EMEA SARL	France	Hosting Provider	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
Amazon Web Services, Inc (AWS) – Legal Name: Amazon Web Services EMEA SARL	Ireland	Hosting Provider	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
QS Unisolution GmbH	Germany	Account Management, Project Management, Client Success	100% owned subsidiary of QS. Intra company agreement, DPA and Technical & Organizational Measures are in place as per Art.28 of GDPR
QS Unisolution GmbH (UK Infra Team (DevOPS))	United Kingdom	Infra Team (DevOPS)	100% owned subsidiary of QS. Standard Data Protection Clauses, Intra Company Service Agreement and Technical & Organizational Measures are in place as per Art. 28 of GDPR.
QS Eastern Europe SRL	Romania	Client Support, Project Management, Sales	100% owned subsidiary of QS. Standard Data Protection Clauses, Intra Company Service Agreement and Technical & Organizational Measures are in place as per Art. 28 of GDPR.
QS Quacquarelli Symonds India Private Limited	India	Infra Team (DevOPS), Product management, Development & QA, Account management	100% owned subsidiary of QS. Standard Data Protection Clauses, Intra Company Service Agreement and Technical & Organizational Measures are in place as per Art. 28 of GDPR. Transfer Impact Assessment
Zendesk Germany	Germany	Software-as-a-service products related to customer support and other customer communications. Hosted in Germany	DPA is in place as per Art. 28 of GDPR
LAN Projekt Poland	Poland	Infra Team (DevOPS)	Located within EU. DPA and Technical & Organizational Measures are in place as per Art.28 of GDPR
Cloudflare, Inc.	EU & Canada	Content Delivery Network (CDN) services and security with EU DC (e.g., Cloudflare WAF, DDoS protection, caching, SSL encryption)	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
Brevo France	France	Email Delivery
Elavon Financial Services DAC t/a Opayo (Ireland)	Ireland	Secure Payment Gateway

MoveON Specific Sub-Processors

Company name	Place of data processing	Purpose	Safeguard measures
Telemaxx Telecommunikation GmbH	Germany	Hosting Provider – MoveON hosting (Applicable to Universities hosted under moveon4.de only for MoveON)	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
Amazon Web Services, Inc (AWS) – Legal Name: AMAZON WEB SERVICES EMEA SARL, UK BRANCH London	UK	Hosting Provider (Applicable to Universities hosted under moveon4.com only)	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
OVH Groupe SA	France	Hosting Provider (Applicable to Universities hosted under moveonfr.com only)	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
Amazon Web Services, Inc (AWS) – Legal Name: Amazon Web Services Canada, Inc	Canada	Hosting Provider (Applicable to Universities hosted under moveonca.com only)	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
QS Unisolution GmbH	Germany	Account Management, Project Management, Client Success	100% owned subsidiary of QS. Intra company agreement, DPA and Technical and Organizational Measures are in place as per Art.28 of GDPR
QS Unisolution GmbH (UK Infra Team (DevOPS))	United Kingdom	Infra Team (DevOPS)	100% owned subsidiary of QS. Intra company agreement, DPA and Technical and Organizational Measures are in place as per Art.28 of GDPR
QS Eastern Europe SRL	Romania	Client Support, Project Management, Sales	100% owned subsidiary of QS. Intra company agreement, DPA and Technical and Organizational Measures are in place as per Art.28 of GDPR
QS Quacquarelli Symonds India Private Limited	India	Infra Team (DevOPS), Product management, Development and QA, Account management	100% owned subsidiary of QS. Intra company agreement, DPA and Technical and Organizational Measures are in place as per Art.28 of GDPR
Zendesk Germany	Germany	Software-as-a-service products related to customer support and other customer communications. Hosted in Germany	DPA is in place as per Art.28 of GDPR
LAN Projekt Poland	Poland	Infra Team (DevOPS)	Located within EU. DPA and Technical and Organizational Measures are in place as per Art.28 of GDPR
Cloudflare, Inc.	EU and Canada	Cloudflare WAF with regional service (EU DC for EU clients and Canada DC for Canada clients), DDoS protection, SSL encryption	Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS
Twilio, Inc. (SendGrid)	EU and US	Email Delivery as per respective client location EU/US (Applicable for Clients who don’t use their own email provider via email integration)	Data Processing Agreement (DPA) and Technical and Organizational Measures are established and available with QS
N8N	Germany	Data integration and workflow automation tool used to facilitate secure data synchronisation and transformation between MoveON and university systems (e.g. HIS, CampusOnline)	Data Processing Agreement (DPA) in place; all data processed within Germany; encryption at rest (AES-256 via Azure Storage), encryption in transit (TLS/SSL); temporary retention for debugging (max 1 month); no international data transfers

QS Student Recruitment Services Specific Sub-Processors

Entity Name	(Country Location(s) of processing)	Purpose	Contact Details
Acoustic, L.P	United States	Marketing Automation	1125 Oak St., Suite 201, Conway, AR 72032, United States
ClickSend Pty Ltd	Australia	Communications Platform	Level 24, 367 Collins Street, Melbourne, Victoria 3000, Australia
Tableau Software, LLC	United States; United Kingdom; Australia	Hosting and Business Intelligence Reporting	Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States
Twilio, Inc.	United States	Communications Platform	375 Beale Street, Suite 300, San Francisco, CA 94105, United States
Ciptex Limited	United Kingdom	Communications Platform Services	WeWork, 1 St Peter’s Square, Manchester, M2 3DE, United Kingdom
Informatica LLC.	United States	Data Integration	2100 Seaport Blvd, Redwood City, CA 94063, United States
Google LLC	United States	Cloud Infrastructure Services	1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
Appian	United Kingdom	Workflow Automation Platform	20 Fenchurch Street, 25th Floor, London, EC3M 3BY, United Kingdom
Okta	United States	Multifactor Authentication Platform	100 First Street, San Francisco, CA 94105, United States

QS General IT Contractor Sub-Processors

Entity Name	(Country Location(s) of processing)	Purpose	Contact Details
Compegence India	India	IT Related Support	A4-1214, Gokulam IHF APT 8th Main, 8th Mile, Kanakapura Road, Dodakallasandra Post, Bangalore, 560010, India
Interworks	India	IT Related Support	Interworks Europe Unit 1, Christchurch Business Park, BH23 4FL, United Kingdom

QS Employability (QSEM) Sub-Processors

Entity Name	(Country Location(s) of processing)	Purpose	Contact Details
Amazon Web Services, Inc.	United Kingdom	Hosting and Infrastructure	410 Terry Avenue North, Seattle, WA 98109, United States
Google LLC	United States	Cloud Infrastructure Services	1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
Mixpanel Limited	United States	Platform Analytics	One Front Street, Floor 28, San Francisco, United States

Infrastructure and General Sub-Processors

Entity Name	(Country Location(s) of processing)	Purpose	Contact Details
Amazon Web Services, Inc.	United States	Hosting and Infrastructure	410 Terry Avenue North, Seattle, WA 98109, United States
Snowflake Inc.	United Kingdom	Hosting and Infrastructure	Suite 3A, 106 East Babcock Street, Bozeman, Montana 59715, United States
Minoro Ltd t/a Kleene.ai	Ireland	Data Integration	Overseas House, Floor 1, 19-23 Ironmonger Row, London, EC1V 3QN, United Kingdom
Jupyter	Malaysia	Infrastructure	Malaysia
Microsoft Inc.	United Kingdom	Hosting and Infrastructure	One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland
Microsoft Inc.	United States	Business Administration, Delivery, Support and Related Services	1 Microsoft Way, Redmond, WA 98052, United States
Mixpanel UK Limited	European Union; United States	Platform Analytics	1-2 Berners St, London, W1T 3LA, United Kingdom
HubSpot, Inc.	United States	Marketing Platform	2 Canal Park, Cambridge, MA 02141, United States
Atlassian	Australia	Customer Support Platform	Atlassian Pty Ltd c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104, United States

‍

In addition to the Sub-Processors listed above, the following entities are Group Companies of QS, and accordingly may also function as Sub-Processors. A complete and comprehensive list of QS Group Company entities can also be found here.

QS Group Company Sub-Processors

Entity Name	(Country Location(s) of processing)	Purpose	Contact Details
QS Unisolution GmbH	Germany	Infrastructure and Client Delivery	Wankelstraße 14, 70563 Stuttgart, Germany
QS Unisolution Ltd	United Kingdom	Infrastructure and Client Delivery	1 Tranley Mews, Fleet Road, London, NW3 2DG, United Kingdom
QS France SARL	France	Client Delivery	17-21 Rue Saint Fiacre, Paris 2, 75002 Paris, France
QS Eastern Europe SRL	Romania	Client Delivery	Domus II Office Building, 3rd Floor, 114-116 Stirbei Voda Street, District 1, Bucharest 010119, Romania
QS Quacquarelli Symonds (Australia) Pty	Australia	Infrastructure and Client Delivery	Level 3, 595 Collins Street, Melbourne 3000, Victoria, Australia
QS Quacquarelli Symonds SDN BHD	Malaysia	Infrastructure and Client Delivery	Unit No. 25-8, Level 25, Q Sentral, 2A, Jalan Stesen Sentral 2, KL Sentral, Kuala Lumpur 50470, Malaysia
QS Quacquarelli Symonds India Private Limited	India	Infrastructure and Client Delivery	4th Floor, Nitesh Timesquare, Sy No. 8, M. G. Road, Bengaluru, 560 001, India

‍

Version Control

Last updated: 15th March 2024