Sub-processors
Last updated: 1 November 2026
Draft. This text has not been reviewed by a lawyer yet. Items in square brackets are still to be filled in.
Who processes data for Eskuadra
These providers process agency or account data so that Eskuadra can run. Each one is bound by a data processing agreement or equivalent terms. Where a provider is outside the European Economic Area we rely on the EU Standard Contractual Clauses or an adequacy decision.
| Provider | What it does | Where | What it sees |
|---|---|---|---|
| Supabase | Database, sign-in, file storage and server functions | European Union (Frankfurt), on Amazon Web Services | All agency and account data |
| Cloudflare | Delivery of the website and the app, DNS, edge security | Global network with EU routing | Request metadata, IP addresses |
| Anthropic | The model behind Compa | United States | The message, the page context and the records returned for that answer; not used to train models under the provider’s commercial terms |
| Scaleway | Transactional email (sign-in codes and links) | France (Paris) | Email address, the code or link |
| Google, Microsoft | Calendar sync, only when a member connects their own calendar | Per the member’s own account | Task and meeting titles, times, attendee emails |
| YouTube (nocookie), Vimeo | Clips embedded on pitch pages | United States | The viewer’s IP address when a clip is played |
Changes to this list
Before adding or replacing a provider that processes agency data, we update this page and tell agency admins in the app and by email at least 30 days ahead, so that an agency can object under its data processing agreement. Changes that only concern the website are listed here without notice.
Questions: privacy@eskuadra.com.