Data Sub-Processor Policy
Quark Sub-Processors
Version: 2.0
Last Updated: November 20, 2024
Quark uses certain sub-processors to provide key components of its SaaS and cloud-hosting services and wider ecosystem, explained in the table below.
Due Diligence
Quark’s due diligence process involves evaluating the security, privacy and confidentiality practices of approved sub-processors that potentially may have access to process information within the service to carry out designated activities on Quark’s behalf.
We enter into written agreements with sub-processors that enforce compliance with applicable data protection laws, security controls, confidentiality and international data transfer requirements.
We also restrict sub-processor access to only what is necessary to maintain and provide the Quark service to our customers. Sub-processors are strictly prohibited from using customer service, content or personal information for any purpose other than to support Quark in providing the service to its customers.
Appointing and Changing Sub-Processors
Quark will notify customers of the appointment of any new sub-processor or changes to any existing sub-processor that will materially affect the processing of personal information involved within Quark activities, where it assumes the role of data processor (the delivery of SaaS or cloud-hosting services and technical support) within its wider ecosystem.
The customer may object to the appointment of, or any change, in the sub-processor where it has reasonable grounds for doing so. In such circumstances, Quark shall be entitled to address the objection through one of the following options at its sole discretion:
- Cease to use the relevant sub-processor
- Take steps suggested by the customer to address the objection
- Cease to provide the particular services to the data controller, which involve the relevant sub-processor
| Name | Processing | Territory(ies) | ||||
|---|---|---|---|---|---|---|
|
|
Headquartered in United States (not the location of processing activities) Multi-tenant SaaS systems – QPP NextGen, Quark Docurated for Enterprise and Quark Docurated:
Single-tenant SaaS systems – QPP NextGen and Quark Docurated for Enterprise:
Single-tenant cloud-hosting systems – QPP hosting:
|
||||
|
Service Cloud (Salesforce) |
Technical product support ticketing |
United States |
||||
|
Nalpeiron |
Quark Product Licensing |
United States |
||||
|
Microsoft Corporation Azure OpenAI Service (Optional Add-on) |
Embedded AI service (Optional Add-on purchase) |
Deployed in any of the MS Azure data center locations, within the same geography as the main Quark application purchased. Data processed in same geographic location. |
Service-Specific Processing
Quark may process personal information in relation to specific product services, as per the table below. These services are additional to the main product and therefore may require additional commercial discussion and contractual agreement.
When consent is needed for use of the additional service, it will be presented within the product, referring to information in the table below.
| Service | Service and Data Processed | Data Processing Country |
|---|---|---|
| QuarkXPress Legacy Document Converter | QuarkXPress documents will be uploaded to a U.S.-based server for conversion. No personal information will be used during this process, and no data will be permanently stored on the server. Data will be temporarily stored during processing, before being removed once the converted document has been returned to the end user. | Server in the United States Vendor – AWS |