Sub-processors and DPA summary

Skrum uses two service providers for commercial communication.

• Polar processes customer, product, order, subscription, and payment-event data.
• Resend processes recipient addresses and bounded transactional or notification email content.
• Neither provider needs chat, task, meeting, or code content for its core role.

Bring-your-own-key choices determine which AI provider processes requests.

• A selected AI provider receives bounded context only when an authorised AI operation runs.
• LiveKit carries meeting media, and an S3-compatible object store holds files and recordings.
• Skrum manages provider accounts, regions, terms, retention, and network placement.

Skrum records DPA acceptance for eligible workspaces without claiming a certification that has not been earned.

• The workspace compliance surface exposes the current DPA version and receipt.
• Provider-specific terms still apply to services the operator selects.
• Contact sales to request the current DPA and deployment-specific sub-processor details.