Subprocessors
ServiceHistory uses the third parties below to deliver the service. Each one processes personal data only on our instructions and under a data processing agreement.
We give customers 30 days' notice before adding or replacing an entry on this list.
| Subprocessor | Purpose | Personal data shared | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Infrastructure hosting | All platform data | US East (N. Virginia) |
| — Amazon RDS (PostgreSQL) | Primary database | All stored personal data | US |
| — Amazon S3 | File and photo storage | Service photos, attachments, contracts | US |
| — Amazon Cognito | Identity and authentication | Employee and operator email, name, MFA enrollment | US |
| — Amazon SES | Transactional email delivery | Client name and email, service order references | US |
| — Amazon SQS | Notification queueing | Recipient email and merge fields in transit | US |
| — Amazon CloudFront | Static frontend delivery | IP addresses (access logs) | Global edge |
| — AWS Secrets Manager / SSM | Credential storage | No personal data | US |
| Meta Platforms (WhatsApp Business) | Inbound and outbound messaging | Client phone number, message content in transit | US / global |
| Zoho Corporation (Zoho Desk) | Support ticketing | Employee email and name, internal identifiers, ticket body | Data-centre dependent |
| Cloudflare | Turnstile CAPTCHA on the client portal | IP address, browser challenge data | Global edge |
| Google Fonts | Web font delivery | IP address (browser-level request) | Global edge |
| jsDelivr | CSS and JavaScript asset delivery | IP address (browser-level request) | Global edge |
WhatsApp messaging
Meta is not a plain processor. Where a shop uses WhatsApp messaging, phone numbers and message content reach Meta under Meta's own terms, and Meta processes some of that for its own purposes. ServiceHistory stores no message bodies — only a one-way digest of the sender number, the classified intent of the message, and the outcome.
Questions
Write to {{PRIVACY CONTACT EMAIL}} for the current data processing agreement or to ask about a specific subprocessor.