Subprocessors and external services
This overview explains which external platforms may receive data when a specific Torevo service is used. A provider is used only when it is needed for the customer’s enabled product or workflow.
Last updated: 18 July 2026| Provider | Purpose | Scope and condition |
|---|---|---|
| DigitalOcean, LLC | Application and database hosting, encrypted transport, operational backups and monitoring. | Production data is planned for the Frankfurt data centre (FRA1). Exact scope depends on the deployed service. |
| Shopify | Source of order, store and administration context for an installed Shopify application. | Only permissions and webhooks required by the enabled product are processed. Shopify is also the platform selected by the merchant. |
| Packeta Group | Pickup points, shipment creation, labels and delivery status. | Used only for an enabled Packeta Slovakia or Zásilkovna Czechia module. Data required to deliver the shipment is transferred. |
| KROS a. s. | Invoice document creation and reconciliation, payments, credit notes and PDFs. | Used only after the KROS provider is enabled in Torevo Invoices. Scope follows the merchant’s rules and document content. |
| Brevo transactional SMTP | Secure delivery of a message from the public contact form. | Contact name and email, selected topic and message content. The production Brevo SMTP relay is configured; the contracting entity and DPA are confirmed during legal approval. |
How this list is used
- A carrier or invoicing provider receives no data until the merchant connects and enables the relevant module.
- Torevo does not send one provider the API secrets of another provider or another merchant’s data.
- Retention, export and deletion follow the service purpose, contract, legal obligations and a technically verified deletion procedure.
- If a new provider processes personal data on Torevo’s behalf, this overview and applicable contractual documentation are updated before production use.
Send questions about providers, transfers or a specific DPA to torevo@torevo.tech.