Last updated: 13 October 2026
To provide the Squidgy platform we use the service providers below. For personal data we process on behalf of our business customers (see our Data Processing Agreement), these are our sub-processors; for data we process as a controller (see our Privacy Notice) they are our processors. Each is bound by data protection terms. Where a provider is outside the UK, we rely on the transfer safeguards described in the Privacy Notice. Integrations you choose to connect are listed separately: they receive data because you direct it, and they act under their own terms with you.
Used to run the platform for all users.
| Provider | What they process for us | Location |
|---|---|---|
| Vercel | Hosting of squidgy.ai and the Squidgy app | United States (global edge) |
| Render | Hosting of the application backend, agent engine and automation services | United States |
| Supabase | Primary database, authentication and file storage | United States |
| Neon | Database for chat history, embeddings and knowledge bases | United States |
| DigitalOcean | Hosting of our self-managed workflow automation (n8n) servers | United States / EU |
| OpenRouter | AI gateway that routes prompts and context to the model providers below | United States; EU-only processing available |
| Stripe | Payments, billing and builder payouts | United States / Ireland |
| PostHog | Product analytics and session recording in the app and website | European Union |
| Google (Tag Manager) | Loads advertising measurement tags in the Squidgy app, with marketing consent | United States |
| Resend | Account and transactional email | United States |
| Twilio | SMS and WhatsApp messages sent by agents or for notifications | United States |
| HighLevel | CRM, website enquiry forms and marketing attribution | United States |
| Roam | Internal team notifications about signups, enquiries and support | United States |
| Linear | Tracking of bug reports and feedback you send us | United States |
When you use an agent, your prompt and the context the agent needs are sent through OpenRouter to one of these model providers to generate a response. They receive it only to produce that response, under zero data retention, and none may use it for training. Customers who need it can have their agents' AI processing kept on EU infrastructure: OpenRouter then routes only to EU-hosted versions of the Anthropic, OpenAI and Google models, and requests never leave the EU. Models marked below as not available for EU-only processing are not used for those customers.
| Provider | Purpose | Location |
|---|---|---|
| Anthropic (Claude) | Generating agent responses | United States; EU-only processing available |
| OpenAI (GPT) | Generating agent responses; speech and image understanding (called directly) | United States; EU-only processing available for agent responses (speech and image features are processed in the United States) |
| Google (Gemini) | Generating agent responses | United States; EU-only processing available |
| DeepSeek | Generating agent responses for some agents | Third-party hosts, mainly United States; China-based hosts excluded; not available for EU-only processing |
| Moonshot AI (Kimi) | Generating agent responses for some agents | Moonshot AI (China) or third-party hosts; not available for EU-only processing |
| Alibaba (Qwen) | Generating agent responses for some agents | Third-party hosts (United States); not available for EU-only processing |
| Meta (Llama) | Generating agent responses for some agents | Third-party hosts via OpenRouter; not available for EU-only processing |
These receive data only when you choose to connect an integration or use a specific feature (such as voice agents or media generation).
| Provider | When it receives data | Location |
|---|---|---|
| Composio | Connectors used when you link Gmail, Google Calendar, Slack and other tools | United States |
| Perplexity | Web research and website analysis features | United States |
| Fal | Image and avatar generation features | United States |
| Templated.io (Fields Apps Ltda) | Rendering images from design templates | Brazil (hosted on AWS, United States) |
| Apollo | Prospect and company data enrichment, when you use prospecting features | United States |
| Unsplash | Stock image search (search terms only) | Canada |
| Google, Meta, Slack, Shopify and other services you connect | Receive the data your agents send or retrieve when you connect them; they act under their own terms with you | Per provider |
If you allow marketing cookies in the Squidgy app, tags from Meta Platforms Ireland, TikTok and LinkedIn Ireland measure which of our ads lead to visits and signups. These companies are not our processors: they use the information under their own privacy policies, and we are jointly responsible with them for collecting and sending it. They never receive your Customer Content. See our Cookie Policy.
We update this list when our sub-processors change, and we email business customers at least 14 days before a new sub-processor starts processing their data, as set out in section 5 of the DPA. Questions: privacy@squidgy.ai.