skyseatSubprocessors
Draft 0.1 · October 28, 2026
DRAFT — pending review by legal counsel. This is not a final or binding text yet. skyseat is at the prototype stage and the company has not been incorporated yet: the details marked like this […] will be filled in once it exists.
Providers that process personal data of skyseat’s customers to provide the service, under the data processing agreement. We will give 30 days’ notice in the dashboard before adding or changing any of them.
Current list
| Hetzner Online GmbH Germany | Servers for the platform and for the AI employees’ computers; backups. Where: EU (Germany and Finland) Safeguard: No transfer. When: Always |
|---|---|
| Anthropic U.S. | AI model (Claude): receives what the AI employee needs for each task. Where: U.S. Safeguard: Standard contractual clauses [confirm entity and safeguard] When: Always |
| ElevenLabs U.S. | Voice and transcription for calls and for voice in the dashboard. Deletes each call as soon as the platform has saved it (at the latest, the next day). Where: U.S. Safeguard: Standard contractual clauses [confirm entity and safeguard] When: If phone or voice is turned on |
| Twilio U.S. | Phone numbers and call lines. Where: U.S. Safeguard: Data Privacy Framework and binding corporate rules [confirm] When: If phone is turned on |
| Better Stack U.S. / Czechia | Technical server logs and monitoring that the platform is up. May include IP addresses. Where: U.S. (current region; EU planned) Safeguard: Standard contractual clauses [confirm entity and safeguard] When: Always |
| Browser push services (Google, Mozilla, Apple, Microsoft) U.S. | Deliver mobile notifications. The content is end-to-end encrypted: they only see which device it is going to. Where: Various Safeguard: End-to-end encryption (RFC 8291). When: If the person turns on notifications |
Other providers
- Vercel Inc. (U.S.) hosts this public website. It receives no data from the platform or from customers, only the technical logs of website visitors. Certified under the EU‑U.S. Data Privacy Framework.
- Services the Customer connects (Google, Microsoft, Notion, Slack, HubSpot, its invoicing software…): these are not skyseat subprocessors. They are the Customer’s own providers, with their own terms; the AI employee only uses them with the accounts and permissions the Customer gives it.
Note on the prototype phase
While skyseat is a prototype without paying customers, the AI model is used with the founder’s account. Once there are customers, it will move to Anthropic’s commercial API, which does not use data for training. [Review this note when opening to customers]
Other documents: Privacy policy · Terms of service · Data processing agreement · Legal notice · Cookie policy · All