Sub-processors
The companies that help us run Maowl, what each one does, and how your data is protected outside the EU.
The table below lists the sub-processors that handle personal data in team models under our Data Processing Agreement. On a Team plan, we email the team manager at least 30 days before adding or replacing a sub-processor.
| Company | Role | Location | Transfer basis |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, database, online model storage, backups, and email | Cloudflare, Inc. is based in the United States. Stored data stays within the EU. Requests are handled at the data center nearest the visitor, which may be outside the EU. | EU-U.S. Data Privacy Framework (adequacy decision (EU) 2023/1795), with standard contractual clauses as the fallback |
Cloudflare's sub-processors are listed on its website.
Other companies that receive personal data
These companies don't process team models for us. Depending on the service, either we or they are the data controller, as our Privacy Policy explains.
| Company | Role | Location | Transfer basis |
|---|---|---|---|
| Stripe Technology Europe, Limited, and Stripe, LLC | Payments, tax calculation, invoices, and receipts | Ireland and the United States | EU-U.S. Data Privacy Framework and standard contractual clauses, under Stripe's Data Transfer Addendum |
| Google Ireland Limited and Google LLC | Google sign-in, and Gmail for email sent to @maowl.app | Ireland and the United States | EU-U.S. Data Privacy Framework (Google LLC) |
| Microsoft Ireland Operations Limited and Microsoft Corporation | Microsoft sign-in | Ireland and the United States | EU-U.S. Data Privacy Framework (Microsoft Corporation) |
| Anthropic, PBC | The AI design review: the structure of a model you choose to send for review (names, data types, keys, indexes, CHECK rules, defaults, descriptions, and note text), when you click Review design | United States | EU-U.S. Data Privacy Framework and standard contractual clauses, under Anthropic's Data Processing Addendum for its API |
| Anthropic Ireland, Limited | Claude, which helps us read email sent to @maowl.app | Ireland, with transfers outside the EU | Adequacy decisions and standard contractual clauses, as stated in Anthropic's privacy policy |
AI assistants aren't listed here because you or your team choose and connect them. Anything an assistant reads goes to the company behind it, under that company's terms.
Your company's identity provider isn't listed either: if your Team uses its own single sign-on, your company chooses that provider, and we receive only the email address it confirms.
Last updated November 3, 2026.