Sub-Processor List
Quantum Neuron Inc.
Version: 3.1
Effective Date: July 11, 2026
Overview
This Sub-Processor List identifies external service providers engaged by Quantum Neuron Inc. (a Delaware corporation, United States of America, EIN: 30-1448079, 169 Madison Ave STE 15768, New York, NY 10016, United States of America; “Quantum Neuron”) as a Processor in connection with the provision of the Services under the Master SaaS Agreement, Order Form and Data Processing Agreement (DPA).
Not all providers listed below are used for every Client deployment. The providers actually used depend on the Services, features, communication channels, integrations, regions, AI infrastructure and configuration selected by the Client under the applicable Order Form and Functional Scope Annex.
Quantum Neuron (Quantum Neuron Inc.) acts as the Processor of Client Personal Data in accordance with the DPA. The production infrastructure of the Platform is located in the EEA (AWS Ireland, eu-west-1). Transfers of Client Personal Data to Quantum Neuron in the United States are governed by Section 9 of the DPA - EU SCCs (Module Two, and in the scenario described in Section 2.1 of the DPA, Module Three) and, for data subject to the UK GDPR, the UK Addendum (IDTA).
Sub-Processor Table
| Entity | Purpose | Processing region | Categories of personal data | Additional information / transfer mechanism |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud infrastructure hosting and supporting services for the Platform. | EEA (Ireland) | Client Personal Data processed within the Platform. | aws.amazon.com/compliance/gdpr-center/ |
| Celonis, Inc. (Make.com) | Workflow automation integration with the Client's Make.com scenarios. | According to the Client's Make organization region Configuration with EU region hosting is available. | Variable, depending on the Client's scenario configuration. | make.com/en/privacy-notice |
| Deepgram, Inc. | Voice models STT and TTS for voice AI interactions. The provider engaged for a given Client deployment is determined by Quantum Neuron's configuration. | EEA | Voice audio streams, text transcripts, LLM text responses, session metadata. | deepgram.com/privacy |
| ElevenLabs, Inc. | Voice models STT and TTS for voice AI interactions. The provider engaged for a given Client deployment is determined by Quantum Neuron's configuration. | ElevenLabs global infrastructure Processing may take place outside the EEA (processing location is not contractually restricted to the EEA). Transfers outside the EEA are protected by Standard Contractual Clauses (SCCs). | Voice audio streams, text transcripts, LLM text responses, session metadata. | elevenlabs.io/dpa |
| Functional Software, Inc. (Sentry) | Application error and performance monitoring, with personal data removed at source. | EEA | Technical telemetry and error diagnostics; residual data may include masked technical identifiers. | sentry.io/legal/dpa/ |
| Google Ireland Limited (Google Cloud) | Cloud-based AI services supporting AI Persona operations. | EEA | Conversation content and related inputs and outputs. | cloud.google.com/terms/data-processing-addendum |
| Google Ireland Limited (Google Workspace) | Integration with the Client's Google Workspace environment (Gmail, Docs, Sheets, Calendar) within the scopes granted by the Client. | According to the Client's Google Workspace configuration | Email content and metadata, document content, spreadsheet content, calendar events and attendees, contact information. | cloud.google.com/terms/data-processing-addendum |
| HubSpot Ireland Limited | Integration with the Client's HubSpot account via HubSpot's API. | According to the Client's HubSpot account region | CRM records (contacts, companies, deals, engagements) and related properties as configured by the Client. | legal.hubspot.com/dpa |
| LlamaIndex, Inc. (LlamaCloud) | Document parsing services supporting knowledge base ingestion for selected file formats. | EEA | Client-provided knowledge base content submitted for parsing, to the extent it contains Personal Data. | llamaindex.ai/legal/privacy-notice |
| Meta Platforms Ireland Limited | Messaging and social media integrations (Messenger, Instagram Direct, WhatsApp Business, Facebook Comments). Quantum Neuron acts as a Meta Tech Provider. | EEA (primary) With additional transfers in accordance with Meta’s applicable data transfer terms and safeguards. | Message content, phone numbers (WhatsApp Business), profile identifiers, display names, message metadata. | facebook.com/legal/terms/Privacy |
| Microsoft Ireland Operations Limited (Microsoft 365) | Integration with the Client's Microsoft 365 environment (Outlook Mail, Outlook Calendar) within the scopes granted by the Client. | According to the Client's Microsoft 365 configuration | Email content and metadata, calendar events and attendees, contact information. | microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA |
| Microsoft Ireland Operations Limited (Microsoft Azure) | Cloud-based AI services supporting AI Persona operations. | EEA | Conversation content and related inputs and outputs. | microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA |
| Pinecone Systems, Inc. | Vector database services for semantic search of Client-provided knowledge base content. | EEA | Vector representations of Client knowledge base content and End-User queries. | pinecone.io/dpa |
| Telnyx LLC | Voice (VoIP) and SMS communication infrastructure, including phone number provisioning. | EEA | Phone numbers, voice media streams, SMS content, call and message metadata, delivery reports. | telnyx.com/legal/data-processing-addendum |
| Twilio Ireland Limited | Voice (VoIP) and SMS communication infrastructure, including phone number provisioning. | EEA | Phone numbers, voice media streams, SMS content, call and message metadata, delivery reports. | twilio.com/en-us/legal/data-protection-addendum |
Notes
Some of the providers listed above are used only where the Client enables or connects the relevant integration, channel or feature. For Client-enabled integrations, the Client is responsible for its own account configuration, permissions, region settings, platform terms, lawful basis, notices and any controller or joint-controller obligations applicable to the connected third-party platform.
Representatives
EU Representative (Article 27 EU GDPR). Quantum Neuron has designated, on the basis of a written mandate, Quantum Neuron Sp. z o.o. with its registered office in Warsaw, ul. Żurawia 6/12/745, 00-503 Warsaw, Poland, entered in the register of entrepreneurs of the National Court Register under KRS number: 0001222865, as its representative in the European Union under Article 27 EU GDPR. Quantum Neuron Sp. z o.o. does not participate in the processing of Client Personal Data, does not act as a processor or sub-processor, and is not listed on this Sub-Processor List. Contact for data subjects and supervisory authorities: privacy@quantumneuron.ai and the representative’s postal address indicated above. Quantum Neuron’s representative in the United Kingdom (Article 27 UK GDPR) is Kochanowski Consulting Ltd, 151 Picton Road, Liverpool, Merseyside L15 4LG, United Kingdom; contact: ido@quantumneuron.ai.
EU Data Residency Mode (Enterprise)
EU Data Residency Mode (Enterprise). For Enterprise Clients, Quantum Neuron offers a contractual EU Data Residency mode in which the set of Sub-Processors used is limited exclusively to entities and processing regions within the EEA, in accordance with the applicable Order Form. In this mode, providers processing data in the United States are not used or their use is limited to a configuration processing data exclusively within the EEA.
Updates to the List and Objection Right
Updates to the List and objection right. Quantum Neuron notifies Clients of any planned addition or change of a Sub-Processor with the advance notice specified in the DPA, enabling the Client to raise a justified objection in accordance with Article 28(2) EU GDPR and the provisions of the DPA. Quantum Neuron remains fully liable to the Client for the acts and omissions of its Sub-Processors to the extent provided in the DPA.
Data Transfers and Additional Documentation
Data transfers and additional documentation. A data processing agreement (DPA) is in place with each Sub-Processor and, in the case of transfers to third countries, Standard Contractual Clauses (EU SCCs) and, for data subject to the UK GDPR, the UK International Data Transfer Addendum (IDTA) are used. For transfers involving entities established in the United States, Quantum Neuron maintains documented Transfer Impact Assessments and a policy for handling government authority requests; this documentation is made available to Enterprise Clients upon request, subject to confidentiality obligations.
Publication and Contact
This Sub-Processor List is published at https://quantumneuron.ai/legal/m26/subprocessors.
For questions regarding this Sub-Processor List, please contact privacy@quantumneuron.ai with a copy to legal@quantumneuron.ai.