| Provider | Location | Role | Purpose & data |
|---|---|---|---|
| Hetzner Online GmbH | Germany (EU) | Application hosting & database | Runs the Trusq application and the PostgreSQL database. Customer data at rest resides here, within the EU. |
| Mistral AI | France (EU) | AI drafting & grounded assistant | Processes the content you submit, to draft documents and answer questions grounded in cited sources. EU-based — used in place of US AI services. |
| INWX GmbH | Germany (EU) | Transactional email (results, alerts & digest) | Delivers requested result, account and alert emails over authenticated SMTP. Receives the recipient address and message content. |
Sub-processors
Who processes your data
The third parties Trusq relies on to run the service. Every one is EU-based. There are no US sub-processors. This list is public so your legal team can review it before signing.
Data categories. The precise personal-data categories shared with each sub-processor, and the reference to each provider’s own DPA, are set out in the Data Processing Agreement provided during onboarding. We list purpose here at a high level and confirm the specifics in writing before production use.
Changes to this list
If we add or change a sub-processor, we’ll update this page. If you’d like to be notified of changes, tell us at privacy@trusq.io and we’ll note your organisation. A formal advance-notice mechanism is on the roadmap.