Skipaki Pro FOR OPERATORS ← Back to promo

Sub-processors

Last updated: 2026-06-26 · This list is updated whenever a sub-processor is added or removed.

Starter content. The list below reflects the actual sub-processors Skipaki Pro uses today. The legal wording around safeguards and transfer mechanisms is under review by counsel.

Skipaki Pro uses the following sub-processors to provide the dispatcher portal at pro.skipaki.com and demo.pro.skipaki.com. Each is bound by a data processing agreement (DPA) and uses appropriate safeguards for any cross-border data transfer.

Infrastructure (EU)

ProviderServiceLocationDataTransfer
Supabase (AWS) Primary database, authentication, file storage Dublin, Ireland (eu-west-1) All operator and customer records EU
Vercel Web hosting, edge functions, CDN Frankfurt (fra1) Request metadata, logs EU

Specialised services (cross-border)

ProviderServiceLocationDataTransfer
Google Maps (Google LLC) Geocoding, directions, place autocomplete for customer addresses United States Delivery / collection addresses US · SCCs + EU-US DPF
OpenAI gpt-5-nano parsing of operator-typed freeform job notes ("AI Quick Order") United States Free-text notes (may contain customer name, phone, address). Zero-retention enabled via the store: false API flag. US · SCCs + DPA
MailerSend Transactional emails (booking confirmations, invoices, team invitations, driver assignments) European Union Customer email, name, order number EU
Telegram Internal alerts to the Skipaki ops team (no customer data sent) United Arab Emirates Operational alerts only — no personal data N/A

How safeguards work

EU-based providers store and process data within the European Economic Area under GDPR.

US-based providers operate under Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework. We have signed each provider's data processing agreement.

OpenAI zero-retention means each parse request is processed and immediately discarded — there is no 30-day log retention buffer.

Notification of changes

We update this page whenever a sub-processor is added, removed, or changes location. Operators with an active subscription will receive 30 days' email notice of any new sub-processor that processes customer personal data.

Questions

Email privacy@skipaki.com.