Infrastructure subprocessors
- Cloudflare, Inc. Edge compute, queues, workflows, short-lived object storage, and database connectivity. Processing may occur across Cloudflare's global network.
- Aiven Ltd. Managed PostgreSQL for tenant-scoped audit data, encrypted credentials, and Shopify session records. The current service is hosted outside mainland China; exact contracted region details are available to merchants on request.
Platform provider
Shopify Inc. and its affiliates provide app distribution, merchant authentication, Admin APIs, and mandatory privacy webhooks. Shopify processes data under its agreements with the merchant and app developer.
Merchant-connected services
Awin and Impact are affiliate networks a merchant may choose to connect. They receive affiliate transaction queries or separately confirmed validation actions under the merchant's own account and agreement. They are merchant-directed recipients rather than general AttribGate infrastructure subprocessors. Impact support remains in beta pending provider acceptance.
Changes
Where practicable, material subprocessor additions will be posted here at least 30 days before they are used for merchant data. Send reasonable data-protection objections to service@skymork.com.