Quotinc Security Subprocessors
SP Subprocessors
Everyone who touches
your data. In one list.
These are the third-party services we rely on to run Quotinc, what each one does, and the data that reaches it. If this list changes, this page changes with it, and we will tell customers before a new subprocessor goes live.
Last updated 1 July 2026
Always in the data path
These services are involved for every customer.
| Subprocessor | What it does | Data it touches | Region |
|---|---|---|---|
| SupabaseManaged database, authentication | Primary storage for your quotations, rates, clients, catalog and audit logs, plus sign-in. | Your structured workspace data and account credentials. | Confirmed in the DPA |
| AnthropicClaude, our AI provider | Powers the in-editor quotation assistant. | The quotation you are actively editing and your own catalog. Not used to train shared models. | United States |
| Google PlacesVenue and hotel photos | Fetches photos and details for hotels, restaurants and venues you add to a quote. | The names of the venues you search for. | United States |
| Microsoft 365Outbound email | Sends transactional email such as invitations and notifications. | Recipient email addresses and the contents of those messages. | Confirmed in the DPA |
| CloudflareDNS | Resolves the quotinc.com domain name. | DNS lookups only. No workspace data. | Global |
Only when a feature is enabled
These services are used only if you turn on the feature that needs them. Off by default.
| Subprocessor | What it does | Data it touches | Status |
|---|---|---|---|
| Transcription providersMeeting-audio transcription | Turns uploaded meeting recordings into text. | The audio you upload and the resulting transcript. | When enabled |
| PostHogProduct analytics | Helps us understand which features are used, to improve the product. | Usage events. Not the contents of your quotes or rates. | When enabled |
Regions marked "Confirmed in the DPA" are set per deployment and stated in the data-processing agreement we sign with you. Want the specifics before you sign? Ask us and we will put them in writing.
Questions about a subprocessor?
We are happy to go through any of these in detail, or sign a data-processing agreement that names them.