Subprocessors
To provide HoundSquare, we rely on the vetted vendors below. For each we list the vendor, its role, the categories of data it may process, and the status of our data-processing agreement (DPA) with it. At this pre-launch stage every DPA is marked needed and must be signed before we accept EU or California users.
Current subprocessors #
| Vendor | Role | Data categories | DPA status |
|---|---|---|---|
| Cloudflare, Inc. | CDN, R2 object storage, Cloudflare Images, Cloudflare for SaaS (custom hostnames), Cloudflare Registrar | business-page-assets, images, dns-config, custom-hostname-metadata, static-content | needed |
| Amazon Web Services, Inc. (Amazon SES) | Transactional and bulk email delivery; bounce/complaint notifications | recipient-email, email-content, delivery-metadata | needed |
| Stripe, Inc. | Subscription billing, payment processing, invoicing, metered billing, Checkout | billing-contact, payment-method-token, subscription-metadata, invoice-data | needed |
| Anthropic, PBC | Claude LLM inference (BYOK — per-org keys optional) | agent-prompt-content, inference-io | needed |
| OpenAI, L.L.C. | GPT LLM inference (BYOK optional) | agent-prompt-content, inference-io | needed |
| Google LLC (Gemini) | Gemini LLM inference (BYOK optional) | agent-prompt-content, inference-io | needed |
| Google LLC (Workspace APIs) | Google Calendar OAuth + API; Google Contacts import for newsletter integration (per-org consent) | oauth-tokens, calendar-events, contact-list, google-account-email | needed |
| Meta Platforms, Inc. | Facebook Graph API — page messaging + connection (per-org consent) | oauth-tokens, facebook-page-metadata, inbound-messages | needed |
| Mailchimp / Intuit Inc. | Newsletter integration import (per-org API key) | subscriber-list, api-key | needed |
| Twilio, Inc. | SMS provider for paid-tier text alerts | recipient-phone, message-content | needed |
Local and development environments use embedded PostgreSQL, filesystem object storage, and mock email/SMS stubs — no external subprocessors process data in those environments.
Gated integrations #
Two integrations remain switched off until both their vendor DPA is signed and the integration passes review: Meta Platforms (Facebook messaging) and Twilio (SMS text alerts). No live personal data is sent to these vendors while they are gated off.
Change notification #
We provide 30 days' advance notice of any new subprocessor or material change to this list, so customers can review and, where applicable, object before the change takes effect.
Contact #
Questions about our subprocessors? Contact privacy@houndsquare.com or our Data Protection Officer.