Subprocessors | MartialQA
Subprocessors

Everyone who touches your data, listed here.

MartialQA uses a small number of third-party providers to deliver the service. For each one, this page shows what they do for us, what data is involved, where it is processed, and whether they are an AI provider. We update this page before adding or replacing a subprocessor.

Last updated: August 2026 · To be notified of changes, email info@martialqa.co.za

Service subprocessors

Providers that process customer content

These providers process the conversations, recordings and account data you entrust to MartialQA, under data processing agreements with each of them.

Hetzner Online GmbH

Cloud hosting Privacy & security ↗
Purpose
Application hosting, storage and database services for the MartialQA platform.
Data involved
Customer content, account data and application logs.
Processing location
EU (Germany)

AssemblyAI

Speech-to-text AI provider Privacy & security ↗
Purpose
Transcription of call recordings so conversations can be scored.
Data involved
Call audio and the resulting transcripts.
Processing location
EU

Microsoft (Azure AI Foundry)

AI language models AI provider Privacy & security ↗
Purpose
Scoring conversations for correctness and generating coaching insights, using OpenAI and Anthropic models hosted on Azure AI Foundry.
Data involved
Conversation transcripts and relevant knowledge-base excerpts.
Processing location
France Central (EU)

ElevenLabs

AI voice agents AI provider Privacy & security ↗
Purpose
AI voice agents and roleplay coaching calls (optional feature).
Data involved
Call audio, transcripts and phone numbers.
Processing location
US

Telnyx

Dialler telephony Privacy & security ↗
Purpose
PSTN telephony for the built-in dialler (optional feature).
Data involved
Phone numbers, caller metadata and call audio (transient).
Processing location
US entity, global points of presence

Twilio (SendGrid)

Transactional email Privacy & security ↗
Purpose
Sending transactional emails and notifications.
Data involved
Recipient name, email address and notification content.
Processing location
US

Google Workspace

File exchange Privacy & security ↗
Purpose
Secure exchange of audit samples and reports with customers, and business email.
Data involved
Audit samples (customer content), reports and business contact details.
Processing location
EU
Website and business operations

Providers that support our website and operations

These providers do not process your customer conversations. They support our public website and day-to-day operations.

Cloudflare

Anti-spam and security Privacy & security ↗
Purpose
Form abuse prevention (Turnstile) on the public website.
Data involved
Website visitor metadata such as IP address and browser signals.
Processing location
Global (EU / US)

Paystack

Payment processing Privacy & security ↗
Purpose
Card payments for self-service MartialQA subscriptions.
Data involved
Cardholder data (held by Paystack, never by MartialQA) and billing contact details.
Processing location
South Africa / global (PCI DSS compliant, hosted fields)

Google Analytics

Web analytics Privacy & security ↗
Purpose
Measuring usage of the public website to improve it.
Data involved
Pseudonymised website usage data.
Processing location
EU / US
Changes to this list
MartialQA remains responsible for each subprocessor's performance of its data protection obligations. We will give Customers advance written notice before engaging a new subprocessor that processes customer content. If you object to a change, contact us and we will work through it with you, as set out in our Data Processing Addendum.
info@martialqa.co.za