Sub-Processors & Data Processing

Transparency about third-party companies that process Skillsive data.

Active Data Processors (as of May 2026)

Microsoft Azure

Data Processor

Services

• Cloud infrastructure hosting
• Azure SQL Database (PostgreSQL)
• Azure Blob Storage
• Azure Key Vault
• Azure Functions
• Azure Monitor

Details

Location: West Europe (Netherlands) + Poland Central

DPA: Signed (Standard Contractual Clauses)

Certifications: SOC 2 Type II, ISO 27001, GDPR compliant

Data Processed: User accounts, training progress, certificates, system logs, backups

Cloudflare

Data Processor (Limited)

Services

• Content Delivery Network (CDN)
• DDoS protection
• DNS management
• Web Application Firewall (WAF)
• Access logging

Details

Location: Global (EU, US, APAC edge nodes)

DPA: Signed (Standard Contractual Clauses)

Certifications: SOC 2 Type II, GDPR compliant

Data Processed: HTTP metadata (headers, IP addresses, timestamps), non-encrypted request data. Does NOT see encrypted payloads (TLS protected).

SendGrid (Twilio)

Data Processor

Services

• Transactional email delivery
• SMTP relay
• Email authentication (SPF, DKIM, DMARC)

Details

Location: USA (Twilio infrastructure)

DPA: Signed (Standard Contractual Clauses)

Certifications: SOC 2 Type II, GDPR compliant, EU Data Residency available

Data Processed: Email addresses, notification content, certificates (email attachments)

Planned Sub-Processors (Roadmap)

Stripe

Payment processing

ETA: Q1 2027

Not yet integrated

Sentry

Error tracking & monitoring

ETA: Q3 2026

In evaluation

Additional Analytics

Customer analytics (optional)

ETA: Q4 2026

Planned if feature added

📋 This list is maintained to ensure transparency. When new processors are added, they will undergo the same security and compliance review before integration.

Data Processing Details

Encryption in Transit

All data transmitted to our sub-processors is encrypted using TLS 1.2+ (minimum cipher: ECDHE-AES256-GCM-SHA384).

Data Processing Agreements

All processors have signed Data Processing Agreements (DPAs) with Standard Contractual Clauses (SCCs) for international data transfers.

Audit & Compliance

Processors are regularly audited for security and compliance. All hold SOC 2 Type II or equivalent certifications.

Questions About Our Processors?

This page is updated annually or when processors change. For specific questions about data processing, contact our Data Protection Officer.

[email protected]