Subprocessors
Last updated: 24 May 2026
Skarpix uses a small number of third-party service providers (subprocessors) to operate the platform. We choose providers based on security posture, EU/EEA data residency where practical, and the availability of standard data processing agreements.
The current list is below. We will update this page when subprocessors are added or removed. Customers on paid plans who would like advance notice of subprocessor changes can request this in writing.
Current subprocessors
| Subprocessor | Role | Location | Data processed | DPA |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting infrastructure | Helsinki, Finland (EU) | All platform data at rest and in transit | Hetzner DPA |
| Cloudflare, Inc. | DNS and edge proxy | Global edge network, EU regions used for EEA traffic | IP addresses, request metadata | Cloudflare DPA |
| Resend (Resend, Inc.) | Transactional email delivery | United States, with EU subprocessors and SCCs | Recipient email address, message content | Resend DPA |
How transfers are handled
Hetzner and Cloudflare data processing for EEA users is performed within the EEA. Resend involves a transfer to the United States; this transfer relies on the EU-US Data Privacy Framework adequacy decision and standard contractual clauses (SCCs) as a fallback.
Subprocessors not on this list
We do not currently use:
- Third-party analytics or behavioural tracking
- Customer support chat widgets
- Marketing automation platforms
- Payment processors (payments are handled manually)
If we add any of these or other subprocessors, this page is updated and active customers are notified by email at least 14 days before the new subprocessor begins processing data.
Contact
Subprocessor questions: Email.