Sub-processors
SkinSafe uses the following sub-processors to help run the service, each under a written contract that limits them to our documented instructions. We update this page before adding or replacing a sub-processor.
| Sub-processor | Purpose | Client special-category data? | Location |
|---|---|---|---|
| Hetzner | Infrastructure / hosting | Yes (at rest) | Germany (EEA) |
| Supabase | Database / backend | Yes (at rest) | EU region (US parent; UK Addendum) |
| OpenAI | OCR of licence documents only | No — no Client health/consent data | EU data-residency endpoint |
| Business-address validation only | No — business address data only | Google Ireland / UK Addendum |
Questions: privacy@skinsafe.pro. For the wider picture, see our Privacy Policy.