VendoIQ Subprocessors

Last updated: August 10, 2026

VendoIQ uses a small number of third-party providers to deliver the Services. This page lists every provider that processes personal information on VendoIQ's behalf, what each one does, and where the processing takes place.

We give our business customers 30 days' advance notice before engaging a new subprocessor. To be added to the subprocessor notification list, email: privacy@vendoiq.com

Current subprocessors

Provider

Entity and location

What they process

Purpose

Microsoft Azure

Microsoft Corporation — United States

All Service data: database records, card and badge images, application traffic

Cloud hosting —

PostgreSQL, Blob

Storage, and

Functions

Microsoft Entra External ID

Microsoft Corporation — United States

User name, business email address, role, organization, conference assignments

Authentication and identity management

Microsoft Azure AI Speech

Microsoft Corporation — United States

Dictation audio, transmitted directly from the user's device

Speech-to-text transcription. Audio is processed in memory and is not stored at rest. VendoIQ's servers never receive it

Microsoft Azure OpenAI

Microsoft Corporation — United States

Transcript text; card and badge images

Extraction of structured contact fields

Where processing takes place

All processing by VendoIQ and its subprocessors takes place in the United States.

Customer-directed integrations

Some connections are made at your organization's direction, using credentials your organization holds, to move or retrieve data your organization is already entitled to. These providers are not VendoIQ subprocessors — VendoIQ does not select them, contract with them, or pay them, and cannot use the connection for any other purpose.


Event lead retrieval. When your organization exhibits at a conference or trade show, the event organizer typically provides a lead-retrieval service so exhibitors can scan attendee badges. Where your organization elects to connect that service to VendoIQ, we use the credentials the organizer issues to your organization to retrieve the attendee records your organization is entitled to receive. The provider differs from event to event and is chosen by the organizer, not by VendoIQ. The connection is limited to that event and to the period the organizer keeps it open. VendoIQ will tell you which provider was used for any given event on request.


Business systems. Where your organization authorizes an integration with a CRM or other business system, that system is controlled by its provider under its own terms and privacy policy. Disconnecting an integration does not delete data already written into the receiving system; that must be deleted there.

App distribution

The VendoIQ mobile applications are distributed through the Apple App Store and Google Play. Apple and Google may collect device-level diagnostic information under a setting you control on your device. That is their collection, under their privacy policies, not ours.

VendoIQ, Inc. · 1400 Arrowhead Drive, Brentwood, TN 37027, United States