[ Legal ]
Subprocessors
The companies that process personal data for Skein, what each one does and where.
Effective 4 October 202601Website and reservations
In use today, for this website, the founder reservation and our emails.
| Provider | What it does | Data | Where | Transfer safeguard |
|---|---|---|---|---|
| Stripe · Stripe Payments Europe, Ltd. | Payments, invoices and fraud prevention | Name, email, billing address, VAT id, payment details | EU (Ireland), with transfers to the US | EU–US Data Privacy Framework and Standard Contractual Clauses |
| Vercel · Vercel Inc. | Hosting of the website and the API | IP address, request logs | EU (Frankfurt), US parent company | EU–US Data Privacy Framework and Standard Contractual Clauses |
| Cloudflare · Cloudflare, Inc. | Delivery of the website's media files (the launch film), only when a visitor opens it | IP address, request logs | Global network, files stored in the EU | EU–US Data Privacy Framework and Standard Contractual Clauses |
| Resend · Resend, Inc. | Sending system emails (confirmations, receipts, sign-in links) | Email address, email content of system messages | United States | Standard Contractual Clauses |
02The Skein service
In use from launch, for the mail and data in your workspace.
| Provider | What it does | Data | Where | Transfer safeguard |
|---|---|---|---|---|
| Supabase · Supabase, Inc. | Database and sign-in of the app | Account data, app data and metadata of the mail | EU (Frankfurt), US parent company | Standard Contractual Clauses |
| Hetzner · Hetzner Online GmbH | Servers for background jobs | App data processed by background jobs | EU (Germany) | None (EU) |
| Amazon Web Services · Amazon Web Services EMEA SARL | Delivery of outgoing mail (Amazon SES) and backups | Outgoing messages, addresses, delivery events | EU | None (EU), US parent company covered by Standard Contractual Clauses |
| Cloudflare · Cloudflare, Inc. | Secure network access to the mail servers | IP addresses, connection metadata | Global network, EU data localisation where available | EU–US Data Privacy Framework and Standard Contractual Clauses |
| Sentry · Functional Software, Inc. | Error monitoring (no email bodies) | Technical error data, pseudonymous ids | EU (Germany) | Standard Contractual Clauses |
03Changes to this list
We email customers 30 days before adding or replacing a subprocessor, and you can object, as the data processing agreement describes. AI providers for the agent are added here, with notice, before they process any customer data.