Third-Party Providers and Subprocessors
For our cloud-based and AI-powered features, we work with AI models developed by a handful of carefully selected third party providers. These providers only receive the necessary data to allow the AI model to perform the desired task and are always located in the EU, making them GDPR compliant.
Please see below our third party providers, listed by add-on feature and/or application.
MAXQDA AI Assist
- Amazon Web Services EMEA SARL (AWS)
Provider: Amazon Web Services EMEA SARL (AWS)
Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg.
Location of Personal Data Processing: Germany, France
Data Protection Guarantees for Processing Outside the EEA: Not Required
Subject of Processing: Bedrock: summarizing, term explanation, data chat, code suggestions.
Type of Processing: Generating a response with a large language model
Duration of Processing: Customer-provided data will be deleted promptly once processing is no longer required.
Data Security Measures: aws.amazon.com/security
Terms of Use: aws.amazon.com/service-terms (see Section 50 on AWS Machine Learning and Artificial Intelligence Services)
Notes: AWS does not use your data for training its AI.
- Amazon Web Services EMEA SARL (AWS) – Infrastructure
Provider: Amazon Web Services EMEA SARL (AWS)
Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg.
Location of Personal Data Processing: Germany
Data Protection Guarantees for Processing Outside the EEA: Not Required
Subject of Processing: Hosting the infrastructure
Type of Processing: Storing the data required for service provision
Duration of Processing: Customer-provided data will be deleted promptly once processing is no longer required.
Data Security Measures: aws.amazon.com/security
Terms of Use: aws.amazon.com/service-terms
MAXQDA Tailwind
- Google Cloud EMEA Limited
Provider: Google Cloud EMEA Limited
Address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland.
Location of Personal Data Processing: Germany, Netherlands, France, Belgium, Spain, Italy, Poland, Finland
Data Protection Guarantees for Processing Outside the EEA: Not Required
Subject of Processing: Vertex AI: summarizing, term explanation, data chat, code suggestions.
Type of Processing: Generating a response with a large language model
Duration of Processing: Customer-provided data will be deleted promptly once processing is no longer required.
Terms of Use: cloud.google.com/terms
Data Security Measures: cloud.google.com/docs/security
Notes: Google does not use your data for training its AI. See cloud.google.com/vertex-ai/generative-ai/docs/data-governance for details on how Google processes and governs customer data.
- Amazon Web Services EMEA SARL (AWS) – Infrastructure
Provider: Amazon Web Services EMEA SARL (AWS)
Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg.
Location of Personal Data Processing: Germany
Data Protection Guarantees for Processing Outside the EEA: Not Required
Subject of Processing: Hosting the infrastructure
Type of Processing: Storing the data required for service provision
Duration of Processing: Customer-provided data will be deleted promptly once processing is no longer required.
Data Security Measures: aws.amazon.com/security
Terms of Use: aws.amazon.com/service-terms
MAXQDA TeamCloud
- Amazon Web Services EMEA SARL (AWS) – Infrastructure
Provider: Amazon Web Services EMEA SARL (AWS)
Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg.
Location of Personal Data Processing: Germany
Data Protection Guarantees for Processing Outside the EEA: Not Required
Subject of Processing: Hosting the infrastructure
Type of Processing: Storing the data required for service provision
Duration of Processing: The agreement’s duration aligns with the customer’s TeamCloud subscription. Three months after the end of the contract, the customer’s project data will be removed from TeamCloud.
Data Security Measures: aws.amazon.com/security
Terms of Use: aws.amazon.com/service-terms
MAXQDA Transcription
- Amazon Web Services EMEA SARL (AWS) – Infrastructure
Provider: Amazon Web Services EMEA SARL (AWS)
Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg.
Location of Personal Data Processing: Germany
Data Protection Guarantees for Processing Outside the EEA: Not Required
Subject of Processing: Hosting the infrastructure
Type of Processing: Storing the data required for service provision
Duration of Processing: Customer-provided data will be deleted promptly when no longer needed. The uploaded media file will be removed 7 days after upload, and the generated transcript will be deleted 7 days after customer download unless deletion is requested earlier.
Data Security Measures: aws.amazon.com/security
Terms of Use: aws.amazon.com/service-terms
- Cantab Research Limited (trading as “Speechmatics”)
Provider: Cantab Research Limited
Address: 296 Cambridge Science Park, Milton Road, Cambridge, CB4 0WD, United Kingdom
Location of Personal Data Processing: Netherlands
Data Protection Guarantees for Processing Outside the EEA: Not Required
Subject of Processing: Transcription
Type of Processing: Converting a media file into text using artificial intelligence
Duration of Processing: Customer-provided data will be deleted promptly once processing is no longer needed.
Data Security Measures: www.speechmatics.com/security
Terms of Use: www.speechmatics.com/legal/terms-of-service
