Subprocessor List
Last updated
This page lists the third-party providers (each a "Subprocessor") that Thinqpoint engages to deliver Thinqpoint Platform (the "Service"). It is incorporated by reference into our Privacy Policy and our Terms of Use, including any Business Associate Agreement ("BAA") and Data Processing Addendum ("DPA") between Thinqpoint and a customer organization.
Categories
Thinqpoint engages Subprocessors in the following categories. The Subprocessor identity, role, and processing region for each row is being finalized and will be published here.
| Category | Role |
|---|---|
| Cloud infrastructure (BAA-covered) | Hosts the Service, the database, object storage, and ancillary platform services in the United States. AI Model Providers are accessed through this same cloud infrastructure; the Business Associate Agreement that covers our cloud infrastructure provider also covers the AI Model Providers' processing of any PHI flowing through AI features. |
| AI Model Providers | Provide large-language-model inference for the Service's agentic and conversational AI features. |
| Authentication and CMS | Manages user accounts, authentication, and role-based access control. |
| Product analytics | Captures product-analytics events for usage analysis and UX improvement. Session recording is disabled on authenticated platform routes so that activity inside the application is not replayed by a third-party provider. |
| Transactional email | Delivers account verification, password reset, billing receipts, security alerts, and other transactional communications. |
| Marketing email | Delivers opt-in newsletters and product announcements. |
| Payment processing | Processes paid subscriptions in PCI-DSS-compliant infrastructure. Thinqpoint does not store full payment-card numbers, CVV codes, or full bank account numbers. |
| Error tracking and monitoring | Captures application errors and performance metrics. |
| Customer support tooling | Manages support tickets and inquiries. |
Updates and Advance Notice
We update this list as our Subprocessor roster changes. Before we add a new Subprocessor that will process personal information described in the Privacy Policy, we will provide at least thirty (30) days' advance notice via in-product notification or email to the account contact. The corresponding pre-notification right for customer organizations with respect to Customer Data is governed by the Terms of Use § 8.2, including the customer's right to object to a new Subprocessor on data-protection grounds within fifteen (15) days of notice.
Contact
Questions about this list, or about a specific Subprocessor's role, should be directed to privacy@thinqpoint.com.