Current subprocessors
Every third party that processes customer data to deliver the service, what it receives and where it is established. Last reviewed 2026-10-12. The same list, with endpoints, is in the machine-readable bill of materials.
| Provider | Purpose | Data it receives | Location | Policy |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting (Workers, Pages), database (D1), DNS, edge cache, bot management, operator access control | All site and API traffic; order, shipment and label records at rest | United States (data in the ENAM region, see data residency) | privacy |
| Stripe, Inc. | Hosted checkout, receipts, refunds, carrier-adjustment invoices | Payer email, order amount and description; card data is entered on Stripe and never reaches SMKlog | United States | privacy |
| EasyPost (Simpler Postage, Inc.) | Carrier rating, label purchase, address verification, tracking, customs forms | Sender and recipient names, addresses, phone numbers, email addresses, parcel contents and dimensions | United States | privacy |
| Envia (envia.com) | UPS and FedEx rating and labels on some US domestic lanes | Sender and recipient names, addresses, phone numbers, parcel dimensions | Mexico (headquarters); serves US carriers | privacy |
| Resend, Inc. | Transactional email: labels, receipts, status and notifications | Customer email address, order details, label files | United States | privacy |
| Google LLC | Google Analytics on the site; Gemini models for the packaging estimate | Site usage analytics; item descriptions (never names or addresses) | United States | privacy |
| DeepSeek | Packaging estimate and the pre-payment packaging check from item descriptions; an operator-side helper that parses pasted order text | Item descriptions and declared contents; when an operator uses the parse-order helper, the pasted order text, which can contain names and addresses | China | site |
| OpenRouter, Inc. | Hosted models for the packaging estimate and its arbiter | Item descriptions and declared contents (never names or addresses) | United States | privacy |
| OpenAI, L.L.C. | Packaging estimate | Item descriptions (never names or addresses) | United States | privacy |
| eBay Inc. | Product catalog lookup for packaged dimensions | Item descriptions | United States | privacy |
AI providers receive the words a customer types about the item and, at checkout, the declared contents; they do not receive names, postal addresses, email addresses, phone numbers or payment data. The one exception is an operator-side helper that parses an order pasted as text, used by SMKlog staff, which sends that text to DeepSeek.
Changes to this list
A provider is added here before it starts receiving customer data, and removed when it stops. The news page carries the dated entry. Questions: info@smklog.com.