SStokis
Compliance

Data Processing Agreement

Standard SCC-based DPA available on request for any paid plan. We're GDPR-compliant by default; the DPA formalizes the arrangement for procurement and security review.

Request your DPA

Email info@stokis.io with your company name, registered address, and the email you signed up with. We'll send a pre-signed PDF you can countersign and return within 24 hours.

For custom contract terms (MSA, jurisdiction selection, audit clauses), Growth-tier and above customers can request a custom redline via the same email.

Sub-processors

The following third parties may process customer data as part of Stokis's service. We notify customers 30 days before changes.

Stripe
Payment processing, billing portal, invoicing
EU + USA
Their DPA →
Anthropic
AI agent inference (Claude models)
EU (eu-west-1)
Their DPA →
Sentry
Error monitoring, performance traces
EU (de.sentry.io)
Their DPA →
Tawk.to
Live chat support
USA
Their DPA →
Coolify (your VPS provider)
Hosting, database, file storage
EU (Frankfurt)
European Central Bank
FX rate reference data (read-only)
EU

What we collect

Data residency

All customer data is hosted in the EU (Frankfurt). The Anthropic agent inference happens in their EU region. Sentry traces land on de.sentry.io. Stripe processes payments through their EU entity for European customers.

Your rights