DRAFT — pending review by qualified legal counsel. The list below reflects the third-party service providers actually configured in Skofa's production environment as of the date shown. The surrounding legal commitments (data transfer safeguards, formal Data Processing Agreements with each provider) are not yet finalized; do not treat this page as a completed compliance document.
Subprocessors
Version 1.6 — Draft — last verified 2026-10-21
Skofa uses the following third-party service providers ("subprocessors") to deliver the service. Each processes a limited category of data, only as needed to perform its specific function, and only for businesses that have connected or enabled the corresponding feature.
AI processing
| Provider | Purpose | Data involved |
|---|---|---|
| Anthropic | Core AI reasoning for agent planning, goal execution, and business intelligence | Business content submitted to an agent (objectives, permitted business data, external content agents are asked to read) |
| OpenAI | AI processing (alternate/routed model provider); speech-to-text for voice notes a person sends to their workspace's AI CEO on WhatsApp, and for voice notes customers send to a business's connected WhatsApp number, Facebook Page or Instagram account | Same as above, for requests routed to this provider; the audio of those voice notes |
| Moonshot AI (Kimi) | AI processing (alternate/routed model provider, cost-sensitive tasks) | Same as above, for requests routed to this provider |
| DeepSeek | AI processing (alternate/routed model provider, cost-sensitive tasks) | Same as above, for requests routed to this provider |
Communications
| Provider | Purpose | Data involved |
|---|---|---|
| Resend | Transactional email delivery (account verification, notifications, alerts) | Recipient email address, message content |
| Meta (WhatsApp Business Platform / Messenger / Instagram / Facebook Pages) | Messaging, comment replies and Reel posting, for businesses that connect it; Skofa's own WhatsApp number, on which a workspace's AI CEO talks with the people who link their WhatsApp | Message and comment content and sender identifiers for the connected channel; videos and captions a business chooses to post; for Skofa's number, the linked person's WhatsApp number, messages and voice notes |
| Zernio | WhatsApp connection partner: delivers the messages customers send to a business's WhatsApp number to Skofa, and sends the business's replies, for businesses that connect WhatsApp through it; the same for Skofa's own WhatsApp number, on which a workspace's AI CEO talks with the people who link their WhatsApp | Message content, the customer's WhatsApp number and name, the business's WhatsApp number; for Skofa's number, the linked person's WhatsApp number, messages and voice notes |
Video Studio and social posting
Used only when a business uses Video Studio.
| Provider | Purpose | Data involved |
|---|---|---|
| Shotstack | Assembles promotional videos and flyers from the business's photos, text and choices | The photos, text and settings chosen for a video or flyer; the finished video or image |
| Google (Gemini API) | Generates short AI video clips (premium option) | The photo and short description chosen for a clip; the generated clip |
| Alibaba Cloud (Model Studio, international) | Generates short AI video clips (standard option) | The photo and short description chosen for a clip; the generated clip |
| TikTok | Posting a video to the TikTok account a business connects | The video, caption and posting settings a person confirms |
| Upload-Post | Posting partner: publishes videos, flyers and text posts to the TikTok, Instagram, Facebook, YouTube, X, Pinterest or Telegram accounts a business connects through it | The video or image (as a time-limited link) or text, the caption and posting settings, sent when a person posts or when an AI employee the business allowed to post does so within the business's limits; the business's posting profile name; for Telegram, the bot token and channel, passed through once and not stored |
Payments
| Provider | Purpose | Data involved |
|---|---|---|
| Paystack | Subscription billing and payment processing | Billing contact details, transaction amounts; Skofa does not store full card numbers |
Infrastructure and operations
| Provider | Purpose | Data involved |
|---|---|---|
| Railway | Application hosting, managed database (Postgres) and cache (Redis) | All data the service stores or processes passes through this infrastructure |
| Sentry | Error tracking and observability | Error details and request metadata; configured to avoid capturing full request bodies where practical |
| Pipedream | Execution infrastructure for the broader third-party connector catalog, for businesses that connect a supported integration | Data relevant to the specific connector a business enables |
Business Operating System module
| Provider | Purpose | Data involved |
|---|---|---|
| ERPNext / Frappe | Powers the optional Business Operating System module (accounting, inventory, CRM records, and related business-operations data), for businesses that activate it | Business records the business itself enters into that module, isolated per business |
Changes to this list
Skofa may add or change subprocessors as the service evolves. This page will be updated to reflect the providers actually in use.