Current subprocessors
| Provider | What it does for QuoteRunway | Data | Where |
|---|---|---|---|
| Render | Hosting: runs the app, the background scheduler and the public website. | All service data passes through it; server logs. | USA (Ohio) |
| MongoDB Atlas | Database: stores each company's database and the platform's own records. | All stored service data. | USA (AWS North Virginia) |
| Stripe | Subscriptions and payments. | Billing contact, company name, card details (held by Stripe only), invoices. | USA |
| [Email provider] | Sends QuoteRunway's own account email (sign-in links, invites, security, trial and billing notices) and help requests to our support team. | Recipient names and email addresses, email contents. | [Region] |
| Cloudflare | DNS for quoterunway.com, and forwarding of mail sent to support@quoterunway.com to our team. | Emails sent to our support address. | Global network |
Not subprocessors: services you connect
A company can connect its own systems to QuoteRunway: its mail (Microsoft 365, Google Workspace or its own SMTP server), its PSA (such as ConnectWise), its distributors (such as Ingram Micro, TD SYNNEX and D&H), its documentation tools, webhooks, and its own storage for automatic backups. Data goes to those services only because the company set them up, using the company's own keys and agreements. They aren't QuoteRunway's subprocessors.
Browsers' own push services (from Google, Apple, Mozilla and Microsoft) carry the app's notifications to staff who turn them on. Each notification is encrypted for the receiving device, so the push service can't read it, and prices are left out.
Changes to this list
We'll email company admins at least [30] days before adding or replacing a subprocessor, as the Data Processing Agreement says. Questions: support@quoterunway.com.