skyseatSubprocessors
Draft 0.1 · 10/28/2026
DRAFT — pending review by legal counsel. This is not a final or binding text yet. skyseat is at the prototype stage and the company has not been incorporated yet: the company details are shown as “in preparation” until it exists.
Providers that process personal data of skyseat’s customers to provide the service, under the data processing agreement. We will give 30 days’ notice in the dashboard before adding or changing any of them.
Current list
| Hetzner Online GmbH Germany | Servers for the platform and for the AI employees’ computers; backups. Where: EU (Germany and Finland) Safeguard: No transfer. When: Always |
|---|---|
| Anthropic U.S. | AI model (Claude): receives what the AI employee needs for each task. Where: U.S. Safeguard: Standard contractual clauses When: Always |
| ElevenLabs U.S. | Voice and transcription for calls and for voice in the dashboard. Deletes each call as soon as the platform has saved it (at the latest, the next day). Where: U.S. Safeguard: Standard contractual clauses When: If phone or voice is turned on |
| Twilio U.S. | Phone numbers and call lines. Where: U.S. Safeguard: Data Privacy Framework and binding corporate rules When: If phone is turned on |
| Better Stack U.S. / Czechia | Technical server logs and monitoring that the platform is up. May include IP addresses. Where: U.S. (current region; EU planned) Safeguard: Standard contractual clauses When: Always |
| Google Ireland Ltd. (Google Workspace) Ireland | Sends the platform’s emails (sign-in links, notices, reports and the deletion certificate): the recipient’s address and the email content. Where: EU and U.S. Safeguard: EU‑U.S. Data Privacy Framework and standard contractual clauses When: Always |
| Browser push services (Google, Mozilla, Apple, Microsoft) U.S. | Deliver mobile notifications. The content is end-to-end encrypted: they only see which device it is going to. Where: Various Safeguard: End-to-end encryption (RFC 8291). When: If the person turns on notifications |
Other providers
- Vercel Inc. (U.S.) hosts this public website. It receives no data from the platform or from customers, only the technical logs of website visitors. Certified under the EU‑U.S. Data Privacy Framework.
- Services the Customer connects (Google, Microsoft, Notion, Slack, HubSpot, its invoicing software…): these are not skyseat subprocessors. They are the Customer’s own providers, with their own terms; the AI employee only uses them with the accounts and permissions the Customer gives it.
Note on the prototype phase
Today each customer’s AI employees think with the Customer’s own Anthropic API key or its Claude Team or Enterprise account, under Anthropic’s commercial terms, which do not allow training on that data; Anthropic then also processes it under the Customer’s own agreement with Anthropic. AI included by skyseat (with skyseat’s key) is not available yet; when it is, the same terms will apply.
Other documents: Privacy policy · Terms of service · Data processing agreement · Legal notice · Cookie policy · All