Privacy facts at a glance
- Jurisdictions
- FR · US · GB · IL · SG · ES · DE · JP · AE · IT · EG · CA · NL · PT · AU · IE
- Subprocessors
- 26
- Retention
- Retention duration is specified in Schedule 1 of the DPA depending on the CS Service used, but no specific number of days is stated in the excerpts provided.
- Breach notification
- The DPA references a 'Personal Data Incident' definition but does not state a specific notification timeframe in the excerpts provided.
- Transfer mechanism
- EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (EU SCCs and UK SCCs)
- DPA available
- Yes
- Certifications
- ISO 27001 · ISO 27701 · ISO 27017 · ISO 27018
- GDPR addressed
- Yes
- CCPA addressed
- Yes
Named subprocessors
Amazon Web Services, Inc.
Microsoft Azure
Atlassian Pty Ltd (Jira)
Zendesk, Inc.
Ada Support, Inc.
Salesforce.com France, S.A.S. (Tableau)
Content Square SAS
Content Square, Inc.
Content Square Ltd.
Hotjar Germany GmbH
Hotjar UK Limited
Loris Technologies, Ltd.
Tracked documents
Recent changes
Public summary; per-account review history visible to subscribers tracking this vendor.
Track Hotjar in your workspace.
Get notified when Hotjar adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.
Start tracking — 14-day trialNo card required.