Security

Subprocessors

Great Question leverages the following subprocessors for data processing.

Subprocessor
Business name
Purpose
Data
Data centers
Retention policy
AdobeAdobe Inc.Extract PDF's contentPDF File uploadsAWSStored in perpetuity for analytics purposes.
AlgoliaAlgolia, IncSearch Infrastructure: candidate name for interviews, Previous research data.candidate name for interviews, Previous research data.AWS - SFStored as per account level data retention polices.
AWSAmazon Web Services, Inc.IaaS Provider: File storage (S3) + RDSDatabase service. Image and file uploads including CSV importsAWS-US-WEST-1Stored in perpetuity for analytics purposes.
DailyDailyVideo recording and screensharingCandidate video recordingsAWSData stored for duration of account or as per account level data retention policies.
DatadogDatadog, IncMonitoring and LoggingNo PII - explicitly scrubbed.AWS: VirginiaSee details here: https://docs.datadoghq.com/developers/guide/data-collection-resolution-retention/
DeepgramDeepgramTranscriptionAudioAWS
GAGoogle Analytics (aka Google)Website traffic analyticsPII including IP address anonymized.Google cloud platformStored in perpetuity for financial records
GenwayGenwayAI moderated interviews integration partnerParticipant names, email addresses, interview responses, audio/video recordings (if enabled)Frankfurt, GermanyFormal retention and disposal procedures in place to guide the secure retention and disposal of company and customer data
Google (Gemini API)Google LLCAI embeddings provider (Ask AI transcript semantic search + transcript chunk indexing)Transcript text and Ask AI user-entered query text (may include PII)Google-managed global infrastructureGoogle retains submitted prompts/inputs and outputs for up to 55 days for abuse monitoring (per Gemini API logs/usage policies)
HubspotHubspot, Inc.Sales toolingProspect contact information.AWSStored for duration of relationship with potential customers.
MixpanelMixpanel, IncData analyticsAccount user data.Google Cloud: US Central 1, Council Bluffs, IowaStored in perpetuity for analytics purposes.
MuxMux, Inc.Video transcoding and hostingVideo assetsGoogle CloudStored as per account level data retention polices or for duration of subscription.
NylasNylas Inc.Google Integration incl Email and Calendar: candidate name, email and email content. Access tokens for Gmail and Microsoft integrations.candidate name, email and email content. Access tokens for Gmail and Microsoft integrations.AWSStored for lifetime of account.
Open AIOpenAIMachine learning LLM providerAnonymized and pseudonymized transcript and survey data.Azure
RecallHyperdocs IncVideo call botsVideo call streamN/A
SegmentSegment.io, Inc.Data and analytics pipelineevents and emails data - Account user data.AWSStored in perputity for perpetuity purposes.
SendGridTwillioEmail sending providerName, email, email contentAWSMaximum of 37 days
SentryFunctional Software, Inc. dba SentryException handling and loggingStores contextual error data (user id, email). All other PII scrubbedGoogle Cloud PlatformStored for 90 days.
StripeStripe, IncPayment processing.payment information and history.AWSStored in perpetuity for financial records
TremendousTremendousProcessing IncentivesCustomer name and emailAWSStored in perpetuity for financial records
User InterviewsUser InterviewsParticipant recruitment servicesStudy criteria, screener responses, participant contact infoAWS (US)See details here: https://trust.userinterviews.com/
VeroVero Holdings Pty Ltd.Email sending providercandidate name, email and email contentAWS: us-east-1 (Virgina)Data processed instantly and stored for duration of account.
VitallyVitally, Inc.Customer Success platformUser demographics and behavioral dataAWSStored for duration of relationship with customers.