Sub-processors
Last updated: 2 October 2026
Squeezle uses a small number of third-party service providers (sub-processors) to run the service. A sub-processor is a third party that processes personal data on our behalf. We use these providers to host the application, store data, process payments, monitor errors, send email, and provide optional AI features.
This page lists the sub-processors that support Squeezle today. It forms part of our Privacy Policy and our Data Processing Agreement.
1. Current sub-processors
The table below lists each sub-processor, what it does, and where it operates.
| Sub-processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting of the Squeezle application and its database. | Germany (company); data center in Helsinki, Finland (EU) |
| Cloudflare, Inc. | Web delivery of the application (content delivery network and a secure tunnel to the application servers), Cloudflare R2 object storage for query results, exports, and database backups, and Cloudflare Email Service for transactional email: sign-up codes, invite codes, scheduled-query alerts, and service notices. | United States (company); R2 storage in the EU jurisdiction; global edge network |
| Resend, Inc. | Backup transactional email. Sends the same messages only when Cloudflare Email Service cannot deliver them. | United States |
| Functional Software, Inc. d/b/a Sentry | Error monitoring for the application. | EU data region (Germany) |
| Stripe, Inc. | Payment processing and subscription billing. Handles card data; Squeezle does not store card numbers. | United States, with regional processing |
| Anthropic, PBC | AI assistant: drafting and explaining SQL, and optional sensitive-column tagging. Used only when an organization adds its own Anthropic API key (bring your own key). The prompts, and the schema and query context the assistant sends, go to Anthropic under the organization's own key. | United States |
Customer-configured identity providers (your OpenID Connect or SAML single sign-on) are set up and controlled by you, not operated by Squeezle, so they are not listed as our sub-processors.
2. International transfers
Some of the sub-processors above are located in, or process data in, the United States. Where personal data of individuals in the European Economic Area is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses.
For more on international transfers, see the Privacy Policy and the Data Processing Agreement.
3. Changes and notifications
We may add or replace sub-processors as the service evolves. When we make a material change to this list, we will update this page and, for business customers with a Data Processing Agreement in place, provide notice as described in that agreement so that you have the opportunity to object on reasonable data-protection grounds.
- The date of the most recent change is shown in the Last updated line at the top of this page.
- To be notified of changes to this list, contact us at the address below.
4. Contact
Questions about our sub-processors can be sent to privacy@squeezle.app.