Subprocessors
Effective date: October 7, 2026 · Version 1.5
The third parties that help us deliver the Service.
ScaleIQ uses the subprocessors below to deliver the Service. Each is bound by a written agreement requiring data-protection commitments no less protective than our DPA. This list satisfies the sub-processor transparency requirements of the Texas Data Privacy and Security Act (TDPSA, Tex. Bus. & Com. Code § 541.106).
How we notify you of changes
We notify customers of new or replacement subprocessors at least 30 days before they begin processing Customer Data. To receive these notices by email, subscribe below.
Current subprocessors
Cloud platform & infrastructure
| Subprocessor | Service | Data Categories Processed | Purpose | Jurisdiction | Training on Customer Data |
|---|---|---|---|---|---|
| Microsoft Corporation — Microsoft Azure | Cloud hosting, compute, storage (Azure Container Apps, Azure SQL, Static Web Apps), secrets (Azure Key Vault) | All Customer Data; identifiers; usage metadata | Primary cloud infrastructure, including segregated immutable (WORM) evidence storage | USA (East US 2) | N/A |
| Microsoft Corporation — Microsoft Entra ID | Identity and access management | Identifiers; authentication credentials | Identity & access management | Global / Microsoft cloud | N/A |
AI inference
| Subprocessor | Service | Data Categories Processed | Purpose | Jurisdiction | Training on Customer Data |
|---|---|---|---|---|---|
| Microsoft Corporation — Azure OpenAI Service | Large-language-model inference for AI features | Prompts built from questionnaire answers, uploaded documents and authorized public pages (ComplyIQ) or tenant metadata (other products) (AI providers may store prompts and outputs for a limited period to monitor for misuse, as described in their terms) | AI-assisted analysis | USA (Microsoft Corporation). Stored data: East US 2. AI processing may occur in other Azure regions. | Per Microsoft Product Terms and DPA |
| Microsoft Corporation — Microsoft Copilot (Microsoft 365 Copilot / Copilot Studio) | AI assistance and agent orchestration within the Microsoft 365 environment | Prompts / queries (AI providers may store prompts and outputs for a limited period to monitor for misuse, as described in their terms) | AI assistance and agent orchestration. Copilot Studio may use AI models from Anthropic, which operates as a Microsoft subprocessor under Microsoft’s Product Terms and Data Protection Addendum. | USA / Microsoft cloud | Per Microsoft Product Terms and DPA |
| Microsoft Corporation — Azure AI Document Intelligence | Text extraction from uploaded documents | Content of documents Customer uploads (ComplyIQ) | Text extraction from uploaded documents | USA (East US 2) | Per Microsoft Product Terms and DPA |
Operations, billing & scheduling
| Subprocessor | Service | Data Categories Processed | Purpose | Jurisdiction | Training on Customer Data |
|---|---|---|---|---|---|
| Microsoft Corporation — Commercial Marketplace | Transactable-offer billing and subscription management | Billing contact; transaction data | Billing and subscription management | USA / Microsoft cloud | N/A |
| Stripe, Inc. | Payment processing for direct billing | Payment card data (PCI DSS scope); billing contact; transaction amounts | Payment processing | USA | N/A |
| Microsoft Corporation — Microsoft Bookings | Customer readout and meeting scheduling | Name; email address; meeting metadata | Readout scheduling | USA / Microsoft cloud | N/A |
| Microsoft Corporation — Azure Communication Services | Transactional report delivery and platform notifications | Email addresses; message content (report delivery) | Report delivery email | USA / Microsoft cloud | N/A |
| Microsoft Corporation — Azure Monitor / Application Insights | Application performance and security monitoring | Usage telemetry; application logs; IP addresses | Performance monitoring and security | USA / Microsoft cloud | N/A |
| Microsoft Corporation — Microsoft 365 (Exchange Online) | Transactional and operational email | Email addresses; message content | Transactional and operational email | USA / Microsoft cloud | N/A |
| Microsoft Corporation — Dynamics 365 & Dataverse | Customer support, CRM, and prospect communications | Contact data; support tickets; CRM records | Customer support and CRM | USA / Microsoft cloud | N/A |
International transfers
ScaleIQ sells to customers in the United States. Customer Data is stored in Microsoft Azure’s East US 2 region. Some Microsoft services listed above, including Azure OpenAI and Copilot Studio, may process data in other regions under Microsoft’s Product Terms and Data Protection Addendum. Where Customer Data relates to individuals in the EU/EEA, the UK, or Switzerland, ScaleIQ relies on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or another approved transfer mechanism, with encryption in transit and at rest.
Change history
| Date | Change |
|---|---|
| October 7, 2026 | Removed Anthropic, PBC as a direct subprocessor; no ScaleIQ product sends data to Anthropic directly. Added Microsoft Azure AI Document Intelligence (text extraction from uploaded documents). Updated the Azure OpenAI entry. |
Contact
Questions or objections: privacy@scale-iq.ai · ScaleIQ, LLC · 240 W Galveston St, #1828, League City, Texas 77573