QS Sub-Processor List
QS Quacquarelli Symonds Ltd (“QS,” “we,” or “our”) and its affiliates and subsidiaries (“Group Companies”) may engage and use certain third-party data processors (“Sub-Processors”) to provide services to our customers. These Sub-Processors may have access to personal data provided directly by our clients or to which we may have access in order to perform the contracted services or to enable requested features related thereto (“Client Data”). This page provides important information about the identity, location and role of each Sub-Processor. Terms used on this page but not defined have the meaning set forth itelen the General Terms and Conditions or superseding written agreement between QS and its Clients (the “Agreement”).
We currently use the below list of Sub-Processors to provide our services, infrastructure, customer support, service administration services, and email notifications. Please note that not all Sub-Processors are used in the provision of all services we provide and some may only be involved in assisting with the provision of specific services.
| Infrastructure and General Sub-Processors | ||||
|---|---|---|---|---|
| Entity Name (Country Location(s) of processing) | Purpose | Contact Details | ||
| Amazon Web Services, Inc. | Hosting and Infrastructure | 410 Terry Avenue North Seattle, WA 98109 United States aws.amazon.com | ||
| Snowflake Inc. (United Kingdom) | Hosting and Infrastructure | Suite 3A 106 East Babcock Street Bozeman, Montana 59715 United States [email protected] | ||
| Minoro Ltd t/a Kleene.ai (Ireland) | Data Integration | Overseas House Floor 1 19-23 Ironmonger Row London EC1V 3QN United Kingdom [email protected] | ||
| Jupyter (Malaysia) | Infrastructure | Malaysia | ||
| Microsoft Inc. (United Kingdom) | Hosting and Infrastructure | One Microsoft Place South County Business Park, Leopardstown, Dublin 18, D18 P521 Ireland www.microsoft.com | ||
| Microsoft Inc. (United States) | Business Administration, Delivery, Support and Related Services | 1 Microsoft Way Redmond, WA 98052 United States www.microsoft.com | ||
| Mixpanel UK Limited (European Union) (United States) | Platform Analytics | 1-2 Berners St London, W1T 3LA United Kingdom mixpanel.com | ||
| HubSpot, Inc. (United States) | Marketing Platform | 2 Canal Park Cambridge, MA 02141 United States www.hubspot.com | ||
| Atlassian (Australia) | Customer Support Platform | Atlassian Pty Ltd c/o Atlassian, Inc. 350 Bush Street, Floor 13 San Francisco, CA 94104 United States www.atlassian.com | ||
| QS Institutional Performance Services Specific Sub-Processors (QS Reputation Manager | MoveIN) | |||
|---|---|---|---|
| Company name | Place of data processing | Purpose | Safeguard measures |
| Telemaxx Telecommunikation GmbH | Germany | Hosting Provider | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| OVH Groupe SA | France | Offsite Backup | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| Amazon Web Services, Inc (AWS) Legal Name: Amazon Web Services EMEA SARL | France | Hosting Provider | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| Amazon Web Services, Inc (AWS) Legal Name: Amazon Web Services EMEA SARL | Ireland | Hosting Provider | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| QS Unisolution GmbH (Processor - if this legal entity name is mentioned in the first page under "PARTIES" else this is a sub processor) | Germany | Account Management, Project Management Client Success | 100% owned subsidiary of QS. Intra company agreement, DPA and Technical & Organizational Measures are in place as per Art.28 of GDPR |
| QS Unisolution GmbH (Processor - if this legal entity name is mentioned in the first page under "PARTIES" else this is a sub processor) | United Kingdom | Infra Team (DevOPS) | 100% owned subsidiary of QS. Standard Data Protection Clauses, Intra Company Service Agreement and Technical & Organizational Measures are in place as per Art. 28 of GDPR. |
| QS Eastern Europe SRL | Romania | Client Support Project Management Sales | 100% owned subsidiary of QS. Standard Data Protection Clauses, Intra Company Service Agreement and Technical & Organizational Measures are in place as per Art. 28 of GDPR. |
| QS Quacquarelli Symonds India Private Limited | India | Infra Team (DevOPS) Product management Development & QA Account management | 100% owned subsidiary of QS. Standard Data Protection Clauses, Intra Company Service Agreement and Technical & Organizational Measures are in place as per Art. 28 of GDPR. Transfer Impact Assessment |
| Zendesk | Germany | Software-as-a-service products related to customer support and other customer communications | Hosted in Germany. DPA is in place as per Art.28 of GDPR |
| LAN Projekt | Poland | Infra Team (DevOPS) | Located within EU. DPA and Technical & Organizational Measures are in place as per Art.28 of GDPR |
| Cloudflare, Inc. | EU & Canada | Content Delivery Network (CDN) services and security with EU DC (e.g., Cloudflare WAF, DDoS protection, caching, SSL encryption) | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| Brevo | France | Email Delivery | |
| Elavon Financial Services DAC t/a Opayo (Ireland) | Ireland | Secure Payment Gateway | |
| QS Institutional Performance Services Specific Sub-Processors (MoveON) | |||
|---|---|---|---|
| Company name | Place of data processing | Purpose | Safeguard measures |
| Telemaxx Telecommunikation GmbH | Germany | Hosting Provider MoveON hosting (Applicable to Universities hosted under moveon4.de only for MoveON) | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| Amazon Web Services, Inc (AWS) Legal Name: AMAZON WEB SERVICES EMEA SARL, UK BRANCH | London | Hosting Provider (Applicable to Universities hosted under moveon4.com only) | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| OVH Groupe SA | France | Hosting Provider (Applicable to Universities hosted under moveonfr.com only) | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| Amazon Web Services, Inc (AWS) Legal Name: Amazon Web Services Canada, Inc | Canada | Hosting Provider (Applicable to Universities hosted under moveonca.com only) | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| QS Unisolution GmbH (Processor - if this legal entity name is mentioned in the first page under "PARTIES" else this is a sub processor) | Germany | Account Management, Project Management Client Success | 100% owned subsidiary of QS. Intra company agreement, DPA and Technical & Organizational Measures are in place as per Art.28 of GDPR |
| QS Unisolution GmbH (Processor - if this legal entity name is mentioned in the first page under "PARTIES" else this is a sub processor) | United Kingdom | Infra Team (DevOPS) | 100% owned subsidiary of QS. Intra company agreement, DPA and Technical & Organizational Measures are in place as per Art.28 of GDPR |
| QS Eastern Europe SRL | Romania | Client Support Project Management Sales | 100% owned subsidiary of QS. Intra company agreement, DPA and Technical & Organizational Measures are in place as per Art.28 of GDPR |
| QS Quacquarelli Symonds India Private Limited | India | Infra Team (DevOPS) Product management Development & QA Account management | 100% owned subsidiary of QS. Intra company agreement, DPA and Technical & Organizational Measures are in place as per Art.28 of GDPR |
| Zendesk | Germany | Software-as-a-service products related to customer support and other customer communications | Hosted in Germany. DPA is in place as per Art.28 of GDPR |
| LAN Projekt | Poland | Infra Team (DevOPS) | Located within EU. DPA and Technical & Organizational Measures are in place as per Art.28 of GDPR |
| Cloudflare, Inc. | EU & Canada | Cloudflare WAF with regional service(EU DC for EU clients and Canada DC for Canada clients), DDoS protection, SSL encryption | Service Agreement, Data Processing Agreement (DPA), Non-Disclosure Agreement (NDA) and Technical and Organizational Measures are established and available with QS |
| Twilio, Inc.(SendGrid) | EU & US | Email Delivery as per respective client location EU/US (Applicable for Clients who don’t use their own email provider via email integration) | Data Processing Agreement (DPA) and Technical and Organizational Measures are established and available with QS |
| N8N | Germany | Data integration and workflow automation tool used to facilitate secure data synchronisation and transformation between MoveON and university systems (e.g. HIS, CampusOnline) | Data Processing Agreement (DPA) in place; all data processed within Germany; encryption at rest (AES-256 via Azure Storage), encryption in transit (TLS/SSL); temporary retention for debugging (max 1 month); no international data transfers |
| QS Student Recruitment Services Specific Sub-Processors | ||
|---|---|---|
| Entity Name (Country Location(s) of processing) | Purpose | Contact Details |
| Acoustic, L.P (United States) | Marketing Automation | 1125 Oak St Suite 201 Conway, AR 72032 United States www.acoustic.com |
| ClickSend Pty Ltd (Australia) | Communications Platform | Level 24 367 Collins Street Melbourne Victoria 3000 Australia www.clicksend.com |
| Tableau Software, LLC (United States) (United Kingdom) (Australia) | Hosting and Business Intelligence Reporting | Salesforce Tower 415 Mission Street 3rd Floor San Francisco, CA 94105 United States www.salesforce.com |
| Twilio, Inc. (United States) | Communications Platform | 375 Beale Street Suite 300 San Francisco, CA 94105 United States www.twilio.com |
| Ciptex Limited (United Kingdom) | Communications Platform Services | WeWork 1 St Peter’s Square Manchester, M2 3DE United Kingdom ciptex.com |
| Informatica LLC. (United States) | Data Integration | 2100 Seaport Blvd Redwood City, CA 94063 United States www.informatica.com |
| Google LLC. (United States) | Cloud Infrastructure Services | 1600 Amphitheatre Parkway Mountain View CA 94043 United States about.google |
| Appian (United Kingdom) | Workflow Automation Platform | 20 Fenchurch Street, 25th Floor London, EC3M 3BY United Kingdom appian.com |
| Okta (United States) | Multifactor Authentication Platform | 100 First Street San Francisco, CA 94105, United States www.okta.com |
| QS General IT Contractor Sub-Processors | ||
|---|---|---|
| Entity Name (Country Location(s) of processing) | Purpose | Contact Details |
| Compegence India (India) | IT Related Support | A4-1214, Gokulam IHF APT 8th Main, 8th Mile, Kanakapura Road, Dodakallasandra Post Bangalore, 560010 India compegence.com |
| Interworks (India) | IT Related Support | Interworks Europe Unit 1, Christchurch Business Park BH23 4FL United Kingdom www.interworks.com |
| QS Employability (QSEM) Sub-Processors | ||
|---|---|---|
| Entity Name (Country Location(s) of processing) | Purpose | Contact Details |
| Amazon Web Services, Inc. (United Kingdom) | Hosting and Infrastructure | 410 Terry Avenue North Seattle, WA 98109 United States aws.amazon.com |
| Google LLC. (United States) | Cloud Infrastructure Services | 1600 Amphitheatre Parkway Mountain View CA 94043 United States about.google |
| Mixpanel Limited (United States) | Platform Analytics | One Front Street, Floor 28 San Francisco, United States mixpanel.com |
In addition to the Sub-Processors listed above, the following entities are Group Companies of QS, and accordingly may also function as Sub-Processors. A complete and comprehensive list of QS Group Company entities can also be found here.
| QS Group Company Sub-Processors | ||
|---|---|---|
| Entity Name (Country Location(s) of processing) | Purpose | Contact Details |
| QS Unisolution GmbH (Germany | Infrastructure and Client Delivery | Wankelstraße 14 70563 Stuttgart Germany |
| QS Unisolution Ltd (United Kingdom) | Infrastructure and Client Delivery | 1 Tranley Mews Fleet Road London, NW3 2DG United Kingdom |
| QS France SARL (France) | Client Delivery | 17-21 17 Rue Saint Fiacre Paris 2 75002 Paris France |
| QS Eastern Europe SRL (Romania) | Client Delivery | Domus II Office Building, 3rd Floor 114-116 Stirbei Voda Street District 1 Bucharest 010119 Romania |
| QS Quacquarelli Symonds (Australia) PTY (Australia) | Infrastructure and Client Delivery | Level 3 595 Collins Street Melbourne 3000 Victoria Australia |
| QS Quacquarelli Symonds SDN BHD (Malaysia) | Infrastructure and Client Delivery | Unit No. 25-8, Level 25, Q Sentral, 2A, Jalan Stesen Sentral 2, KL Sentral Kuala Lumpur 50470 Malaysia |
| QS Quacquarelli Symonds India Private Limited (India) | Infrastructure and Client Delivery | 4th Floor Nitesh Timesquare Sy No. 8, M. G. Road Bengaluru, 560 001 India |
| Version Control | ||
|---|---|---|
| Version | Date | Changes |
| 1.0 | 15th March 2024 | First Version |