Last updated: 29 October 2026
Quality Unit, s.r.o. (Bratislava, Slovakia, EU) develops and runs LiveAgent and processes the data in your account (Service Data) as your processor. These companies help us provide the service and can host or access that data.
Where your data is hosted
| Subprocessor | Hosts data of | Where the data is stored |
|---|---|---|
| Amazon Web Services | Customers in Europe & Africa (EU) | Germany (Frankfurt) and Ireland |
| Amazon Web Services | Customers in the Americas (US) | Northern Virginia and Northern California, USA |
| Amazon Web Services | Customers in Asia & Pacific (SG) | Singapore |
| Amazon Web Services | Older data of some UK customers’ accounts | London, United Kingdom |
LiveAgent runs on Amazon Web Services (AWS). You choose your account’s region when you sign up, and its data stays in that region; moving an account to another region needs an agreement with us. Within a region, data can move between AWS data centers in that region to keep the service fast and available, so the data of EU accounts stays in Germany and Ireland.
Customers in the United Kingdom choose Europe & Africa (EU) or Americas (US). Older data of some UK customers’ accounts is still stored on AWS in London (UK); no new accounts are hosted there. The EU recognises the UK as protecting personal data adequately (its adequacy decision runs until December 2031), and the UK recognises the EU, so no extra transfer safeguard is needed. For the transfer terms that apply to UK customers’ data, email gdpr@qualityunit.com.
AWS data centers have round-the-clock security staff, CCTV, multi-factor access control and backup power, and are audited by AWS against standards such as ISO 27001, SOC 1, SOC 2 and PCI DSS. These are AWS’s certifications for its facilities; LiveAgent itself holds no SOC 2 or ISO 27001 certification yet; Quality Unit is undergoing a SOC 2 Type II audit that covers all its services, LiveAgent included. How we protect your data in LiveAgent itself is in our security policy.
Companies that help us provide the service
| Subprocessor | Location | What it does | Transfer safeguard |
|---|---|---|---|
| Quality Unit, LLC | United States | A Quality Unit company that sells LiveAgent in the US and helps provide the service | EU Standard Contractual Clauses |
| Quality Unit Ukraine, LLC | Ukraine | A Quality Unit subcontractor that helps provide LiveAgent and its customer support; its staff open your account only when you ask for help or approve it | EU Standard Contractual Clauses |
| Twilio, Inc. | United States | Connects phone calls, if you use LiveAgent’s call center. Call recordings are stored in LiveAgent with your other account data. | EU Standard Contractual Clauses |
| Makara Partner, s. r. o. | Slovakia (EU) | Our accounting firm; may see account details when it creates and processes invoices | Not needed: within the EU |
Our support team and subcontractors open your account only when you ask for help or approve it. LiveAgent sends your outgoing emails from its own mail servers, or from your company’s mail server if you connect one.
Each subprocessor has a contract with us that requires at least the protection our Data Processing Agreement (DPA) gives you: processing only on documented instructions, staff bound to confidentiality and trained in data protection, appropriate technical and organisational measures, and prompt notice of any security breach. Before we work with a company, we review its security, privacy and confidentiality practices. Customers who signed our DPA get written notice before we add or replace a subprocessor, and have 10 days to object.
AI providers you connect
AI providers are not on this list because your company chooses them. LiveAgent’s AI features, such as AI Answer Assistant, use the provider your company connects with its own API key: OpenAI, Anthropic, Google (Gemini) or FlowHunt. No ticket or chat text goes to a provider until your admin connects it and turns a feature on, and the provider processes it under your company’s agreement with that provider. FlowHunt is made by Quality Unit too, but it is a separate service your company signs up for under its own terms.
Our website and advertising
For our own analytics and advertising, these companies process data about visitors to our website, people who sign up and how our service is used, as our Terms & Conditions and Privacy Policy describe.
| Provider | Service | What it does | Safeguard |
|---|---|---|---|
| Google LLC | Analytics & attribution | Google Analytics 4 (website analytics), Google Ads Enhanced Conversions (hashed email for conversion measurement), Google BigQuery (data warehouse for internal analytics) | EU–US Data Privacy Framework |
| Meta Platforms, Inc. | Advertising measurement | Meta Conversions API: hashed email transmission for advertising effectiveness measurement | EU–US Data Privacy Framework |
| Stape, Inc. | Server-side tag management | Routes analytics and conversion signals to authorised platforms on Quality Unit’s behalf; does not use data for its own purposes | EU server (Amsterdam, Netherlands), under a Data Processing Agreement |
Changes to this list
- 29 October 2026: hosting regions updated, with London listed for older data of some UK customers’ accounts; Quality Unit, LLC and Makara Partner added, as in our DPA; OpenAI removed, because AI providers are services your company connects itself; Intuit (Mailchimp) removed, because LiveAgent doesn’t use Mailchimp for the data in your account (it is only an optional integration your company can connect); transfer safeguard named for each subprocessor outside the EU; Stape’s server location (EU) and Quality Unit Ukraine’s access rule added.
This page describes how we engage subprocessors and lists them as of the date above. It does not give you rights beyond those in your agreement and DPA with us. Questions: gdpr@qualityunit.com.