FlowQi Sub-processors
Last updated: 27 August 2026
This page lists the third parties (“sub-processors”) FlowQi uses to process Customer Data on behalf of its customers, as required by Schedule C of the Terms of Service and by our Data Processing Agreement.
How we manage sub-processors
We engage sub-processors only under data protection terms no less protective than Schedule C, and we remain liable for their performance as required under Article 28(4) GDPR.
We give at least thirty (30) days’ notice before adding or replacing a sub-processor that processes Customer Data. You may object on reasonable data protection grounds within that period. If we cannot resolve the objection together, you may terminate the affected part of the Agreement without penalty and receive a refund of fees paid for the unused remainder of the applicable Subscription Term.
To be notified of changes, or to request the current list in writing, email legal@flowqi.com.
Where your data is processed
FlowQi runs separate EU and US data clusters. Which cluster holds your Customer Data follows the entity you contract with under Article 2.1 of the Terms:
| You contract with | Customer Data is hosted in |
|---|---|
| FlowQi Nederland B.V. | EU/EEA |
| FlowQi International B.V. | EU/EEA |
| FlowQi, Inc. | United States |
If your organisation is established in Türkiye, you choose your contracting entity when you create your account, and that choice determines your cluster. FlowQi has no data centre in Türkiye today; that is on our roadmap.
Some sub-processors operate globally. Where that involves a transfer outside the EEA or the UK, we rely on the transfer mechanisms in Article C.9 of the Terms: an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another mechanism permitted under Chapter V GDPR. For transfers subject to the Turkish Personal Data Protection Law no. 6698, Schedule E of the Terms applies instead.
Infrastructure and platform
| Sub-processor | Service | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Database, authentication, file storage | EU (Frankfurt) or US, per customer cluster | EU SCCs for any non-EEA processing |
| DigitalOcean, LLC | Hosting and compute | EU (Amsterdam, NL) or US | EU SCCs for any non-EEA processing |
| Scaleway SAS | Cloud compute and storage | EU (France) | Not applicable, EEA |
| MongoDB, Inc. (Atlas) | Database services | EU or US, per customer cluster | EU SCCs for any non-EEA processing |
| Storj | Object and backup storage | Distributed, global | EU SCCs |
| Vercel, Inc. | Frontend and edge application hosting | Global edge, US company | EU SCCs and UK IDTA |
| Cloudflare, Inc. | CDN, DNS, security and proxy | Global edge, US company | EU SCCs and UK IDTA |
Application
| Sub-processor | Service | Location | Transfer safeguard |
|---|---|---|---|
| Stripe, Inc. | Billing and payment processing | EU and US | EU SCCs and UK IDTA |
| Google LLC | Optional sign-in with Google | EU and US | EU SCCs and UK IDTA |
| Microsoft Corporation | Optional sign-in with Microsoft | EU and US | EU SCCs and UK IDTA |
| Intercom, Inc. | Customer support and in-product messaging | EU and US | EU SCCs and UK IDTA |
| PostHog, Inc. | Product usage analytics | EU (PostHog EU Cloud) or US | EU SCCs and UK IDTA |
| Formspree, Inc. | Web form handling for lead and contact forms | US | EU SCCs |
FlowQi group entities acting in support
| Entity | Role | Location |
|---|---|---|
| FlowQi Group B.V. | Development, infrastructure and operational support | Netherlands (EEA) |
Intra-group processing is covered by intra-group data protection terms. Transfers inside the EEA need no additional mechanism, and any transfer outside the EEA or the UK uses the EU SCCs or the UK IDTA.
Website analytics and advertising
Plausible (cookieless website analytics), Google Analytics 4, and advertising platforms including LinkedIn, Google Ads, Reddit and X operate on our marketing website under FlowQi’s own responsibility, as controller. They are not processors of in-product Customer Data. Those tools, and the cookies they set, are described in our Cookie Notice.
AI features
AI-assisted features are not currently enabled in the product, and no AI provider processes Customer Data at this time. If FlowQi introduces AI features, the relevant provider and the purpose it is used for will be added to this list before the feature is activated.
Questions about this list: legal@flowqi.com · FlowQi, Australiëlaan 5, 3526 AB Utrecht, the Netherlands