runsonwhat

Square's tech stack

What does Square use?

Square (squarepayroll.com) uses at least 9 tools we can see from public records, including Contentful for its website, Cloudflare for content delivery, Amazon SES for email delivery and OneTrust for security. Last checked .

Industry
Accounting
Size
201–1,000 employees
Based in
St. Charles, United States
Founded
1999
LinkedIn
Company page
Re-check liveVisit squarepayroll.com
Tools found
9
Categories
9
Layers
4 of 5
Last checked
Oct 2026

Square's stack, layer by layer

Each tool links to the other companies we've found using it. The label says what kind of public trace gave it away.

Edge & Hosting

2 tools, where the bytes are served from

CDN & Edge

DNS

Application

2 tools, what the product is built with

AI

Media & UI

Go-to-market

3 tools, how they find and keep customers

Website & CMS

Marketing

Ads & Pixels

Company Ops

2 tools, what the team runs on day to day

Email Delivery

Security & Compliance

Companies like Square also use

Tools common among companies with a similar stack that we haven't found at Square.

Companies with a stack like Square's

Ranked by shared tools, with rare tools counting more.

Square tech stack FAQ

What tools does Square use?

We've found 9 tools at Square (squarepayroll.com). Edge & Hosting: Cloudflare and Amazon Route 53. Application: GSAP. Go-to-market: Pinterest and Contentful. Company Ops: Amazon SES and OneTrust. Last checked October 6, 2026.

What CMS does Square use?

Square uses Contentful for its website. We found Contentful through website code.

Does Square use Cloudflare?

Yes. We found Cloudflare at Square through DNS records and website code. Cloudflare is used by 570,137 companies we track.

How does runsonwhat know what Square uses?

We read public traces only: Square's DNS and email records, certificate logs, the code its website loads, and published subprocessor lists. A tool is listed only when a direct record backs it up. DNS is rechecked weekly and the website monthly.

We read public traces only: DNS and email records, certificate logs, website code and published subprocessor lists. A tool is listed when a direct record backs it up, and dropped when a recheck no longer finds it. Is this your company? See how to opt out.