Qusto uses the following third-party sub-processors to provide the Qusto platform. This list is referenced in the Data Processing Agreement and is kept up to date in accordance with GDPR Article 28(2). Category-level disclosure also appears in the Privacy Notice.
Current Sub-processors
| Sub-processor | Country | Data Processed | Legal Basis for Transfer |
|---|---|---|---|
| Hetzner Online GmbH | Germany (EU) | All customer and end-user analytics data (compute and storage) | EEA hosting — no international transfer |
| Brevo SAS | France (EU) | Customer email address (transactional notifications only) | EEA — no international transfer |
| Stripe Payments Europe Ltd | Ireland (EU) | Customer billing information (no analytics or visitor data) | EEA — no international transfer |
| Cloudflare, Inc. | United States | IP address and request metadata at the CDN edge (cleared after request; no analytics event payloads stored by configuration) | EU SCCs (Decision 2021/914) + EU–US Data Privacy Framework |
| Formspree, Inc. | United States | Beta application and contact form fields (email, store URL, platform) — website forms only; no store analytics visitor data | EU SCCs (interim — EU form processor migration planned) |
EU-hosted support chat (not a third-party SaaS sub-processor)
Customer support chat on qusto.io is provided via Chatwoot software that we operate on EU infrastructure. Chat messages are not sent to Crisp or another third-party chat SaaS. Infrastructure hosting for that service is covered by the hosting row above (and related EU infrastructure we control).
Change Notification
Qusto will provide at least 30 days' advance notice before adding a new sub-processor or making a material change to an existing sub-processor's role. Notice is given via in-app notification and by updating this page.
If a Controller objects to a proposed change, it may terminate the relevant services in accordance with the termination provisions of the Data Processing Agreement.
Change History
| Date | Change |
|---|---|
| 9 August 2026 | Removed Crisp IM SAS (retired). Documented EU-hosted Chatwoot support. Added Formspree, Inc. (website forms). Entity attribution aligned to brand “Qusto”. Contact standardised to compliance@qusto.io. |
| 21 May 2026 | Initial list published |
Contact
For questions about sub-processors or data processing, contact compliance@qusto.io.