Legal
Subprocessors
The third parties that process data on Skuvelo's behalf, what each one does, and where it runs. This page is maintained separately from the privacy policy so it can stay current as vendors change.
Last updated August 3, 2026
| Provider | Purpose | Data | Location | Status |
|---|---|---|---|---|
| Hetzner Online GmbH | Application and database hosting | All Account Data and Workspace Data | Nuremberg, Germany | Active |
| Vercel Inc. | Web application delivery and edge network | Requests and responses pass through in transit, including session cookies and workspace pages. Nothing is stored at rest. | United States | Active |
| Resend | Transactional email — sign-in links, invitations, and account notices; inbound supplier email routing | Recipient email address and message content; inbound supplier messages sent to your Skuvelo address | United States | Configured, not yet processing |
| S3-compatible object storage | Storage of supplier email attachments | Attachment files and message bodies from supplier email you route to Skuvelo | Provider and region set per deployment | Configured, not yet processing |
| Stripe, Inc. | Subscription billing and payment processing | Billing contact, subscription and invoice records. Card details go directly to Stripe and are never stored on Skuvelo systems. | United States | Configured, not yet processing |
"Configured, not yet processing" means the integration is built and the provider is wired into the product, but no customer data has been sent to it yet. We list these rather than waiting, because a subprocessor list that only names providers on the day they go live is a list that is quietly wrong most of the time.
Services you connect are not subprocessors
Services you connect yourself — sales channels, accounting systems, carriers — are not subprocessors. Data moves to them because you instructed it to, and their handling of it is governed by their own terms and privacy policies. The current list of available integrations is maintained on the integrations page.
See the integrations page for the current list.
Notice of changes
We post new subprocessors here before they begin processing customer data. Where we have to replace a provider urgently — an outage, a security incident, or a provider ceasing service — we post the change as soon as we reasonably can instead. Customers who want notice by email can request it at our privacy address.
One provider is planned but not yet chosen: an AI extraction service to read purchase-order details out of supplier email, for customers who enable that feature. It will be named here before it processes anything, and the feature is off until then.
Write to privacy@skuvelo.com to be notified, or read the privacy policy for the commitments behind this list.