Subprocessors
Last updated: May 27, 2026
This list identifies the third-party subprocessors that Shiffy (“Shiffy”) engages to help deliver the Services. Shiffy processes workforce data as a processor on behalf of operator businesses, and acts as a controller of storefront customer accounts (including the email delivery of customer sign-in and order-status messages). Anthropic note: when AI features are used, workforce data may be processed by a third-party large language model provider. This page is provided for transparency and does not constitute legal advice.
| Subprocessor | Purpose | Data Shared | Region |
|---|---|---|---|
| Stripe, Inc. | Payment processing and subscription billing | Billing contact, subscription details, payment card data (PCI-compliant; handled by Stripe) | United States |
| Google LLC (Firebase / FCM) | Push notification delivery to mobile devices | Device push tokens, notification payloads | United States |
| Amazon Web Services (SES + SMTP) | Transactional and service email delivery | Recipient email address, email content (e.g., invites, alerts, receipts, storefront customer magic-link sign-in and order-status emails) | United States |
| Anthropic, PBC | AI features (suggestions and summaries via large language model) | Feature input content, which may include workforce data submitted to the AI feature | United States |
| Functional Software, Inc. (Sentry) | Error monitoring and performance telemetry | Diagnostic, crash, and performance data; limited identifiers | United States |
Shiffy does not currently use an SMS provider. If text messaging is introduced, any SMS subprocessor will be added to this list and used only with appropriate consent.
Operator businesses may request the current subprocessor list or a Data Processing Addendum (DPA) by contacting us at privacy@shiffy.app. For more on how we handle personal information, see our Privacy Policy and Terms of Service.