VendoIQ Subprocessors
Last updated: August 10, 2026
VendoIQ uses a small number of third-party providers to deliver the Services. This page lists every provider that processes personal information on VendoIQ's behalf, what each one does, and where the processing takes place.
We give our business customers 30 days' advance notice before engaging a new subprocessor. To be added to the subprocessor notification list, email: privacy@vendoiq.com
Current subprocessors
Provider
Entity and location
What they process
Purpose
Microsoft Azure
Microsoft Corporation — United States
All Service data: database records, card and badge images, application traffic
Cloud hosting —
PostgreSQL, Blob
Storage, and
Functions
Microsoft Entra External ID
Microsoft Corporation — United States
User name, business email address, role, organization, conference assignments
Authentication and identity management
Microsoft Azure AI Speech
Microsoft Corporation — United States
Dictation audio, transmitted directly from the user's device
Speech-to-text transcription. Audio is processed in memory and is not stored at rest. VendoIQ's servers never receive it
Microsoft Azure OpenAI
Microsoft Corporation — United States
Transcript text; card and badge images
Extraction of structured contact fields
Where processing takes place
All processing by VendoIQ and its subprocessors takes place in the United States.
Customer-directed integrations
Some connections are made at your organization's direction, using credentials your organization holds, to move or retrieve data your organization is already entitled to. These providers are not VendoIQ subprocessors — VendoIQ does not select them, contract with them, or pay them, and cannot use the connection for any other purpose.
Event lead retrieval. When your organization exhibits at a conference or trade show, the event organizer typically provides a lead-retrieval service so exhibitors can scan attendee badges. Where your organization elects to connect that service to VendoIQ, we use the credentials the organizer issues to your organization to retrieve the attendee records your organization is entitled to receive. The provider differs from event to event and is chosen by the organizer, not by VendoIQ. The connection is limited to that event and to the period the organizer keeps it open. VendoIQ will tell you which provider was used for any given event on request.
Business systems. Where your organization authorizes an integration with a CRM or other business system, that system is controlled by its provider under its own terms and privacy policy. Disconnecting an integration does not delete data already written into the receiving system; that must be deleted there.
App distribution
The VendoIQ mobile applications are distributed through the Apple App Store and Google Play. Apple and Google may collect device-level diagnostic information under a setting you control on your device. That is their collection, under their privacy policies, not ours.
Questions
VendoIQ, Inc. · 1400 Arrowhead Drive, Brentwood, TN 37027, United States