Last Updated: October 4, 2023
To support the delivery of Services to its Customers, which includes providing access to and use of the group health insurance quoting platform commercially known as PerfectQuote (“Application”), PerfectQuote, Inc. (the “Company”) works with, from time to time, third-party service providers, including cloud-based data processors, which may, at times, have access to certain Customer Data (each, a “Subprocessor”). This page provides important information about the identity, location and role of each Subprocessor. Capitalized terms used herein, but which are not defined, shall have the meaning set forth in the Subscription Agreement (e.g., the Master Terms and Conditions of Service, Order Form and other pertinent documents) by and between Company and Customer (the “Agreement”).
Third Parties
Generally, the Company uses Subprocessors to provide development services, systems support, Application infrastructure and other technical services, and management or processing of, generally, Application data, and more specifically, Customer Data (collectively, “Subprocessor Support”). Prior to engaging any Subprocessor and regularly thereafter, and as part of the Company’s SOC 2 compliance requirements, the Company performs due diligence to evaluate each Subprocessor’s privacy, security and confidentiality practices, and executes an agreement implementing its applicable obligations.
The Company has used and/or uses the following Subprocessors to provide Subprocessor Support in order to help with delivery of our Services or perform other business and Application functions:
Entity Name: Amazon Web Services, Inc.
Subject matter, nature, and duration of processing: The Company uses Amazon Web Services, Inc. to process and store user data for the duration set forth in the user’s (or its organization’s) agreement with the Company. The Company also uses other Amazon Web Services services, including CloudCheckr other related security and monitoring services, that have root access to the Application hosting environment.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Atlassian, Inc.
Subject matter, nature, and duration of processing: The Company uses Atlassian, Inc. and its suite of products, including Jira and Confluence, for development management and software lifecycle tasks. Atlassian products may retain Customer Data for the duration of the user’s (or its organization’s) agreement with the Company.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: ChurnZero, Inc.
Subject matter, nature, and duration of processing: The Company uses ChurnZero, Inc. as its customer relationship management platform.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Dropbox, Inc.
Subject matter, nature, and duration of processing: The Company uses Dropbox, Inc. for document storage and management services. Customer documents are stored for the duration set forth in the user’s (or its organization’s) agreement with the Company.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Google LLC
Subject matter, nature, and duration of processing: The Company uses Google suite of products, including Gmail for Business, Google Cloud, and Google Maps for document storage, internal and external team collaboration, Application support for geo-location, and Customer related support and technical services. User data processed by Google is retained as set forth in the user’s (or its organization’s) agreement with the Company.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Ideon, Inc.
Subject matter, nature, and duration of processing: The Company uses Ideon as its small group/metallic benefits quoting data solution provider. The Application submits only essential group census information, as provided by Customer, to Ideon to receive plan benefits and rate information.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Innovative Data Solutions, LLC
Subject matter, nature, and duration of processing: The Company uses Innovative Data Solutions as a managed service provider in connection with Application hosting services with Amazon Web Services.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Nine Scope Software Ltd.
Subject matter, nature, and duration of processing: Service provider for Application development, DevOps and back-end technical support.
Location (Country): United States of America, Montenegro, India
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Slack, Inc.
Subject matter, nature, and duration of processing: The Company uses Slack, Inc. for internal and external messaging and voice communication management, including file sharing and customer support. Customer Information, if any, is retained as set forth in the user’s (or its organization’s) agreement with the Company.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Smarty, Inc.
Subject matter, nature, and duration of processing: The Company uses Smarty, Inc. as its USPS address verification resource. Customer Data, if any, is retained as set forth in the user’s (or its organization’s) agreement with the Company.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Userpilot, Inc.
Subject matter, nature, and duration of processing: The Company uses Userpilot, Inc. for personalized in-app experiences and to monitor user engagement. Customer Data, if any, is retained as set forth in the user’s (or its organization’s) agreement with the Company.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Zapier, Inc.
Subject matter, nature, and duration of processing: The Company uses Zapier to connect the Application with Zendesk, Inc. Application users can submit support requests via in-app forms, and Zapier processes these requests to create support tickets within Zendesk.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Zendesk, Inc.
Subject matter, nature, and duration of processing: The Company uses Zendesk, Inc. for cloud-based customer support services. User data processed by Zendesk, Inc. is retained as set forth in the user’s (or its organization’s) agreement with the Company.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Zoom, Inc.
Subject matter, nature, and duration of processing: The Company uses Zoom, Inc. for internal and external communications with PerfectQuote and Customer stakeholders. User data processed by Zoom, Inc. is retained as set forth in the user’s (or its organization’s) agreement with the Company.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Entity Name: Zywave, Inc.
Subject matter, nature, and duration of processing: The Company uses Zywave as its small group/metallic benefits quoting data solution provider. The Application submits only essential group census information, as provided by Customer, to Zywave to receive plan benefits and rate information.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Geographies: We may process personal data in Brazil, India, Montenegro and the United States.
Insurance Carriers: Subject to Customer’s Subscription Agreement, we may submit Customer Data to our insurance carrier partners to obtain group health plans and rates. For a list of insurance carrier partners that the Application integrates with, please contact sales@perfectquote.io.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clauses
Solution Providers: Subject to Customer’s Subscription Agreement, we may submit and receive Customer Data with a Customer’s solution provider application, including but not limited to, Agency Management Systems and Benefits Administration platforms. For a list of solution providers that the Company directly integrates with, please contact sales@perfectquote.io.
Location (Country): United States of America
Adequacy Mechanism Supporting Transfer: Standard Contractual Clause
Updates
As our business grows and evolves, the Subprocessors we engage may also change. We will endeavor to provide the owner of Customer’s account with notice of any new Subprocessors to the extent required under the Agreement, along with posting such updates here. Please check back frequently for updates.