Subprocessors
StudioFlow uses a small number of third-party services to run the product. This page lists every one of them, what it does, and where it is located — including the ones based outside the EU, because a subprocessor list that only mentions the convenient ones is worse than none.
The application and the database — where your clients, projects, documents and invoices live — run at Hetzner in Germany, and your uploaded files, galleries and backups sit in Backblaze B2’s EU region in the Netherlands. Application, database and your files are therefore hosted in the EU.
Two things are not: transactional email and payments use US providers under GDPR safeguards. Email to your clients is delivered via Resend in the US, which retains message content for up to 30 days under its standard retention policy. Both are in the table below, and neither is quietly folded into the sentence above.
| Subprocessor | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Application and database hosting | Germany (EU) |
| Backblaze, Inc. (B2) | Object storage — photos, galleries, documents, backups | Netherlands (EU) |
| Cloudflare, Inc. | CDN and DNS | United States |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | United States |
| Stripe, Inc. | Subscription billing and client card payments | United States, with EU entities |
| Google LLC | Calendar synchronisation and OAuth sign-inOnly for studios that connect Google Calendar or sign in with Google. No data reaches Google for studios that do not. | United States |
Changes
When a subprocessor is added, removed or moves region, this page is updated and existing customers are notified by email before the change takes effect, where the change is ours to schedule.
Data processing agreement
A countersignable data processing agreement (DPA / AVV) is available on request from info@studioflow.ch.
info@studioflow.chLast updated 19 August 2026.