Subprocessors
Last updated: 2026-05-21
Placeholder copy. Have a privacy lawyer review before relying on this document. The language below is a reasonable scaffold but is not legal advice.
Questaion engages the third parties listed below to deliver the service. Each subprocessor is bound by a written contract with data protection terms at least as protective as ours.
We'll give 30 days' notice (via this page and email to accountholders who subscribe to updates) before engaging a new subprocessor that processes Customer Personal Data.
| Subprocessor | Purpose | Processing region |
|---|---|---|
| Google Cloud Platform | Hosting, Firestore, Cloud Run | US / EU (configurable) |
| Resend | Transactional email delivery | US / EU |
| PostHog Cloud | Product analytics (consent-gated) | US / EU |
| Sentry | Error monitoring | US / EU |
| Stripe | Subscription billing (paid plans) | US |
Subscribe to updates
Email privacy@questaion.com to be notified about subprocessor changes.