Heap Trust Center
Over 10,000 businesses trust Heap to power their analytics. Maintaining that trust is our paramount concern.
This page gives you access to relevant information regarding our approach to privacy, security, and compliance.
Sub-processors in use
The following lists table lists Heap’s current affiliates and third-party sub-processors who are authorized to process personal data in connection with the Heap Services:
Last Updated: February 2024
Sub-processor
Description of Processing
Country
Heap Core Software Services
Amazon Web Services (AWS)
Description of Processing
Hosts the Services and Customer Data and backups
Country
USA
Datadog
Description of Processing
Provides monitoring and alert services on system performance
Country
USA
Heap Session Replay Add-on
Google Cloud Platform
Description of Processing
Hosts the Services and Customer Data and backups
Country
USA
Amazon Web Services (AWS)
Description of Processing
Hosts the Services and the Customer Data and backups
Country
USA, Europe
Microsoft Azure
Description of Processing
Hosts the Services and the Customer Data and backups
Country
USA, Europe
Auryc
Description of Processing
Performs analytics and reporting on Customer Data
Country
USA
Contentsquare
Description of Processing
Performs analytics and reporting on Customer Data
Consulting, support, maintenance, implementation, and development
Country
France
Snowflake
Description of Processing
Hosts the Heap data lake and creates data analytics and reports of Customer Data
Country
USA
IBM
Description of Processing
IBM Performs analytics and reporting on Customer Data
Country
USA
Zendesk
Description of Processing
Customer support
Country
USA
Hotjar
Description of Processing
Consulting, support, maintenance, implementation, and development
Country
Malta
HEAP AI
OpenAI
Description of Processing
Provides large language model
Country
USA
Heap Professional Services
Contentsquare
Description of Processing
Professional services partner
Country
France
Hotjar
Description of Processing
Professional services partner
Country
Malta
Scaletrix
Description of Processing
Professional services partner
Country
India
Brooklyn Data
Description of Processing
Professional services partner
Country
USA
Mammoth Growth
Description of Processing
Professional services partner
Country
USA
Ragnarok
Description of Processing
Professional services partner
Country
USA
Unipro
Description of Processing
Professional services partner
Country
USA
Definitions
“Heap Services” means the products and services provided by Heap to Customers under an agreement signed between them.
“Personal Data”, “Processing”, “Processor”, “Sub-processor” shall have the meaning as defined under applicable data protection laws.
Subscribing to updates from the sub-processor list
To subscribe to updates concerning Heap's Sub-processor List, please use this Request Form or send an email to privacy@contentsquare.com with a request to subscribe, and you will be provided with updates on any changes in this list.
Requesting more information about a sub-processor
For any additional information concerning Heap’s data processing practices or any specific Sub-processors, please send an email to privacy@contentsquare.com identifying the Sub-processor and the requested information.
Objecting to a sub-processor
A customer (in its capacity as Data Controller) may object to Heap’s use of a specific Sub-processor in accordance with the terms of the Data Processing Agreement governing the relations between the parties. Such objection may be sent by email to privacy@contentsquare.com (subject line “Sub-processor Objection”) containing the following information:
Customer Entity Name
Sub-processor Entity Name
Grounds for Objection
Requestor Name
Requestor Email
Objections must be based on legitimate data protection grounds in accordance with the terms of Heap’s standard Data Processing Agreement.