Subprocessors
To deliver the SkillHQ platform, Skillsolutions uses a small set of trusted third-party service providers (subprocessors). Each one has a signed Data Processing Agreement with us, appropriate safeguards for international data transfers, and is bound to handle personal data only under our documented instructions.
Last updated: October 14, 2026
| Subprocessor | Purpose | Location | Transfer mechanism | DPA |
|---|---|---|---|---|
| Supabase Inc. | Database, authentication, storage | India (AWS Mumbai) | SCCs 2021/914 Module 2 | View DPA |
| Vercel Inc. | Application hosting (servers in Mumbai); static files cached on its global edge network | India (Mumbai, region bom1) — company in the United States | SCCs 2021/914 Module 2 | View DPA |
| Cloudflare Inc. | Turnstile bot check on sign-in and public forms (our sites are not routed through Cloudflare) | Global network — company in the United States | SCCs 2021/914 Module 2 | View DPA |
| Resend Inc. | Transactional email delivery | European Union (Ireland, AWS eu-west-1) — company in the United States | SCCs 2021/914 Module 2 | View DPA |
| Sentry (Functional Software Inc.) | Error monitoring, performance tracing | United States | SCCs 2021/914 Module 2 | View DPA |
| Google LLC | Gemini AI inference (text features, smart search, narration, live voice practice), Google Analytics | United States | SCCs 2021/914 Module 2 | View DPA |
| Anthropic PBC | Claude AI inference (text features — each feature uses Claude or Gemini as its main model and the other as backup); Claude web search for optional course-quiz questions that go beyond a course — only for organizations that switch it on; the searches use the course title, description and outline, never course content or personal data | United States | SCCs 2021/914 Module 2 | View DPA |
| PostHog Inc. | Product analytics (pseudonymized usage — not employee monitoring) | European Union (Frankfurt) | EU data region (no transfer) | View DPA |
How we notify you of changes
We will notify customer administrators by email at least 30 days before engaging a new subprocessor or making a material change to the list above. During that period, customers may object on reasonable grounds.
Changes to this list
This page is the single source of truth for our subprocessor list. We review it quarterly and update the last-updated date when any entry is added, removed, or materially changed.
Questions?
For any questions about our subprocessors or international data transfers, contact our Data Protection Officer at dpo@skillsolutions.io