Subprocessors

These are the third parties ("subprocessors") that process personal data when a business uses Querly, as described in our Data Processing Agreement. We tell customers by email at least 30 days before we add or replace one.

In the Querly app

• Soniox, Inc. (United States; call data processed in Soniox's EU region). Speech recognition. Receives the call audio, streamed live from the app over an encrypted connection while the copilot runs, with short-lived keys from Querly's server, and returns the transcript. Doesn't store real-time audio or transcripts and doesn't train on them (policy).
• Hostinger International Ltd. (Cyprus; server in Germany). Querly's server. Every language model request from the app passes through it on its way to the hosts below. It stores no call content.
• OpenRouter, Inc. (United States), through Querly's server. Routing of language model requests. Receives the transcript text, the goal, checklist and line about the other party, the user's question style and the questions shown, and passes them to one of the two hosts below, with zero data retention required and data collection denied on every request.
• Deep Infra Inc. (United States), through OpenRouter. Running the language model (DeepSeek V4.1 Flash) that follows the call and writes questions and summaries. Keeps inputs in memory only, deletes them when the answer is sent, and doesn't train on them (policy).
• Together Computer, Inc. (Together AI) (United States), through OpenRouter. Running the same language model, as the second host. Receives requests only under OpenRouter's zero data retention routing.
• Anthropic (United States), through Querly's server. Writing the pre-call briefing. Receives the goal or checklist, the line about the other party, the language and the number of participants; never the call audio or transcript. Deletes API inputs and outputs within 30 days and doesn't train on them (policy).

Querly's server allows only these hosts and the models the app uses, whatever the app asks.

For the website and billing

• Hostinger International Ltd. (Cyprus; server in Germany). Hosting of the website, and email, including the sign-in codes for the app.
• Stripe Payments Europe, Limited (Ireland). Payments, invoices and the billing portal, for subscriptions and extra hours. Also a controller for its own obligations.

Transfers

• Anthropic: the European Commission's standard contractual clauses, in Anthropic's data processing addendum, which is part of its commercial terms.
• OpenRouter, DeepInfra and Together AI: the European Commission's standard contractual clauses, in OpenRouter's data processing agreement, which is part of its terms of service; OpenRouter binds its hosts by written agreements.
• Soniox: call audio and transcripts are processed in the EU region. For the limited processing outside it (account details, security and support), the European Commission's standard contractual clauses in Soniox's data processing agreement apply.