Sub-processors

Who processes your data

The third parties Trusq relies on to run the service. Every one is EU-based. There are no US sub-processors. This list is public so your legal team can review it before signing.

ProviderLocationRolePurpose & data
Hetzner Online GmbHGermany (EU)Application hosting & databaseRuns the Trusq application and the PostgreSQL database. Customer data at rest resides here, within the EU.
Mistral AIFrance (EU)AI drafting & grounded assistantProcesses the content you submit, to draft documents and answer questions grounded in cited sources. EU-based — used in place of US AI services.
Scaleway SASFrance (EU)Transactional email (alerts & digest)Delivers account and alert emails (change notifications, the digest). Receives the recipient address and message content.
Data categories. The precise personal-data categories shared with each sub-processor, and the reference to each provider’s own DPA, are set out in the Data Processing Agreement provided during onboarding. We list purpose here at a high level and confirm the specifics in writing before production use.

Changes to this list

If we add or change a sub-processor, we’ll update this page. If you’d like to be notified of changes, tell us at privacy@trusq.io and we’ll note your organisation. A formal advance-notice mechanism is on the roadmap.

For your reviewers

Security questionnaireResponsible disclosureSub-processorsStatus & uptime posture
← Back to trust & data