How to read this page
Sicket uses service providers to host the application, deliver email, monitor reliability, support analytics, collect career applications, protect public forms, and run selected AI-assisted product features. Some services are only used when enabled or chosen by the user. A provider's privacy role depends on the service; not every connected service acts solely as Sicket's subprocessor.
Current processor categories
- Infrastructure and database hosting for the core web application and API.
- Email delivery providers for password resets, invitations, security messages, and optional announcement-style email delivery.
- Error monitoring and observability where enabled.
- Bot protection for public forms and self-serve signup where configured.
- Career application forms and CV uploads.
- OpenAI API for specific AI-assisted product features when the organization has opted in.
Vendor list
| Vendor | Purpose | Region / notes |
|---|---|---|
| Stripe | Billing, subscription management, invoices, and payment methods. | Global provider used for self-serve and commercial billing workflows. |
| Mailjet | Transactional email delivery. | Used for invitation, password, ticket, announcement, and contact-form email delivery. |
| DigitalOcean | Application hosting and optional object storage. | Used for infrastructure and uploaded asset storage where configured. |
| OpenAI | Optional AI-assisted ticketing and pattern detection features. | Used only where AI capabilities are enabled. |
| Sentry | Error monitoring and operational debugging. | Used to investigate platform problems when enabled. |
| PostHog | Website and self-serve onboarding analytics. | Used for selected consented analytics events on sicket.app and dashboard.sicket.app. |
| Cloudflare Turnstile | Bot protection for contact, newsletter, and signup forms where enabled. | Processes browser and connection signals for security checks. See the Turnstile privacy notice. |
| Tally | Career application forms and CV uploads. | Belgium-based provider; form submissions and uploaded files are stored in Europe. |
Optional Google services
Google sign-in is used when a user chooses that login method. Embedded Google Maps loads building-location information only after the user allows map content in the dashboard. Loading either service connects the browser to Google; a map request includes the displayed location. These services have their own processing terms and are not described here as ordinary hosting subprocessors. See Google's privacy policy.
OpenAI processing
When enabled by an organization administrator, selected AI-assisted features may send minimized ticket content and metadata to OpenAI as a processor. Sicket applies preprocessing to reduce identifiers. Sensitive-content checks and record exclusions depend on the feature; sanitization is not a guarantee that all personal information can be removed.
International transfers
Some vendors may process personal data outside the European Economic Area. The applicable contractual and organizational safeguards depend on the vendor and processing route. Contact Sicket for current transfer information before relying on the service for a rollout with specific transfer requirements.
Questions
For questions about subprocessors, international transfers, or additional vendor due-diligence material, contact hello@sicket.app.