Legal
Data processing addendum
Last updated: September 1, 2026
This data processing addendum (“DPA”) forms part of the terms of service between Quellbook, Inc. and customers that process personal data of people in the EU, UK or Switzerland through Quellbook.
Roles
The customer is the controller of personal data in its workspace; Quellbook is the processor.
Processing
Quellbook processes personal data only on documented instructions from the customer, to provide the help desk service, and keeps it confidential.
Security
Technical and organizational measures are described on our security page and in our SOC 2 Type II report, available on request (under NDA).
Location and transfers
Data is hosted in AWS us-east-1 (Virginia, US) by default, or in the EU (Frankfurt, eu-central-1) for Scale workspaces with EU data residency. Transfers outside the EU use the standard contractual clauses.
Sub-processors
Listed in our privacy policy. We give 30 days' notice of new sub-processors.
Signing
This DPA applies automatically. For a countersigned copy, email privacy@quellbook.com.