Logiciel D’identité Skycloak inc. (doing business as Skycloak) uses the companies below to run Skycloak. Each of them processes personal data on our behalf, either data about our customers’ accounts or data about the end users who sign in through our customers’ Keycloak realms. This page names every one of them, what each does for us, the data it handles, and where that processing happens.
In the last column, “End-user and account data” means the company handles data from customers’ Keycloak realms, such as users, credentials, sessions and events, as well as account data. “Account and billing data only” means it handles data about Skycloak customers and their accounts, such as names, email addresses and billing details, and no realm data.
Processors of account and end-user data
Managed Keycloak runs in five production regions: US East on Microsoft Azure, US West on Amazon Web Services, EU and CA on OVHcloud, and AU on Akamai. Database backups of the production regions are kept by Amazon Web Services in Ohio.
| Company | Service and purpose | Data handled | Processing location | Data touched |
|---|---|---|---|---|
| Microsoft Azure | Hosts the US East production region in eastus2, the hub: the dashboard and its API, the Skycloak account sign-in, the control plane database, webhook delivery for every region, and the managed Keycloak clusters of customers in that region. Also provides Sign in with Microsoft for the dashboard. | Account, billing and session data; Keycloak realm data (users, credentials, sessions and events) of clusters in US East; webhook events from all regions. | United States (eastus2, Virginia) | End-user and account data |
| Amazon Web Services | Two uses. US West production in us-west-2 (Oregon) runs the managed Keycloak clusters of customers in that region. Backups in Ohio (us-east-2) hold the database backups of the production regions and the secrets store used to operate them. | US West: Keycloak realm data in customer clusters. Ohio: database backups that contain realm data and account data. | United States: us-west-2 (Oregon) for US West production; us-east-2 (Ohio) for backups | End-user and account data |
| OVHcloud | Hosts the EU production region in DE1 and the CA production region in BHS5, where the managed Keycloak clusters of customers in those regions run. | Keycloak realm data (users, credentials, sessions and events) of clusters in those regions. | Germany (DE1); Canada (BHS5, Beauharnois, Quebec) | End-user and account data |
| Akamai | Hosts the AU production region on Akamai (Linode) Kubernetes in Sydney, where the managed Keycloak clusters of customers in that region run. | Keycloak realm data (users, credentials, sessions and events) of clusters in that region. | Australia (Sydney) | End-user and account data |
| Cloudflare | The public entry point of every region: TLS termination, DNS, the web application firewall, rate limiting and custom hostnames. Turnstile checks on Keycloak sign-in pages that use it. R2 object storage for customer themes, uploads and exports, and for the encrypted database backups of managed clusters. | All traffic to the dashboard and to customer Keycloak sign-in pages, including IP addresses; Turnstile tokens and IP addresses; theme files, exports and encrypted database backups. | Global edge network | End-user and account data |
| Tailscale | Private network between the hub and the other production regions, used for event replication, monitoring and operations. | Encrypted traffic between our clusters, which carries events and monitoring data from customer clusters. | Global network | End-user and account data |
| Postmark | Sends the email of the Skycloak account: sign-up verification, password resets, notices about your account, and announcements. | Names, email addresses and the content of the email we send you. | United States | Account and billing data only |
| Stripe | Subscriptions, checkout, invoices and payments. | Billing contact details, plan and invoice history, and payment details, which Stripe holds and we do not. | United States | Account and billing data only |
| Better Stack | On-call paging for critical alerts, a service heartbeat, and the status page. | Alert names and labels, such as the identifier of an affected cluster, and the email addresses of status page subscribers. | European Union | Account and billing data only |
| GitHub | Stores the container images of customer Keycloak clusters, including extensions a customer uploads, and offers Sign in with GitHub for the dashboard. | Customer-supplied Keycloak extensions; name and email address when you sign in with GitHub. | United States | Account and billing data only |
| Sign in with Google for the dashboard, product analytics (Google Analytics and Google Tag Manager, after consent in the dashboard), and Google Ads conversion reporting. | Name and email address when you sign in with Google; usage events; conversion and revenue events tied to an ad click. | United States | Account and billing data only | |
| Mixpanel | Product analytics for the dashboard, after consent in the browser. | Usage events about how the dashboard is used, tied to an account. | United States | Account and billing data only |
| Bugsnag (SmartBear) | Error tracking for the dashboard, after consent in the browser. | Error reports with the browser and session context of the dashboard user. | United States | Account and billing data only |
| Zoho Desk | The support portal at support.skycloak.io, which you reach with your Skycloak account, and the tickets opened from problem reports in the dashboard. | Name, email address and whatever you include in a support ticket. | United States | Account and billing data only |
| Anthropic | Drafts account email, such as overdue invoice reminders and onboarding messages, from the account details they concern. | Name, email address, plan and invoice status of the account an email is written for. | United States | Account and billing data only |
| OpenAI | Conversion reporting for OpenAI ads. | Conversion and revenue events tied to an ad click. | United States | Account and billing data only |
| Slack | Internal notices to our team about security events, account activity and failed deployments. | Account names and email addresses named in a notice. | United States | Account and billing data only |
| Cal.com | Booking of calls with our team; a booked call can extend a trial. | Name, email address and the booking details you enter. | United States | Account and billing data only |
Website visitor services
The companies below only see data about visitors to skycloak.io: the pages they read and what they send through the website’s forms. They do not handle account data or end-user data from Keycloak realms. Our Cookie Policy describes the cookies some of them set.
| Company | Service and purpose | Data handled | Processing location |
|---|---|---|---|
| Cloudflare | Hosts skycloak.io on Cloudflare Workers, and protects its forms with Turnstile and bot management. | Requests to the website, IP addresses, and what you submit in a form. | Global edge network |
| Termly | Cookie consent manager for skycloak.io. | Your consent choices and a consent identifier. | United States |
| Google Tag Manager, Google Analytics and Google Ads on skycloak.io, after consent. | Pages visited, device and browser details, and ad click identifiers. | United States | |
| Reddit ads pixel on skycloak.io, after consent. | Pages visited and ad click identifiers. | United States | |
| OpenAI | OpenAI ads pixel on skycloak.io, after consent. | Pages visited and ad click identifiers. | United States |
| HubSpot | Keeps the contact and sales requests sent from forms on skycloak.io. | Name, email address, company and the message you send. | United States |
| ip-api.com | Looks up the approximate location of an IP address sent with a website form. | The IP address of the person who sent the form. | Germany |
| Cal.com | Call booking on the contact page. | Name, email address and the booking details you enter. | United States |
| WP Engine | Former host of skycloak.io, kept only as a fallback until November 20, 2026. | Requests to the website and IP addresses, while it serves the site. | United States |
Changes to this list
We update this page when we add or replace a company that processes personal data for us, and the date at the top of the page shows when it last changed. How we collect and use personal data is described in our Privacy Policy.
Contact
For questions about this list or about how a company on it handles your data, contact us at privacy [at] skycloak.io.
Questions about this policy?
Our team is happy to help with any questions about this document or how Skycloak handles your data.