The company details are still missing. The marked fields are filled in before the page is used.
Version 1.0 · effective 29 September 2026
When we process personal data on behalf of our customers, we use these sub-processors. The list is Appendix B.1 to the data processing agreement.
| Sub-processor | Legal entity | Purpose | Location | Transfer outside the EU/EEA and basis |
|---|---|---|---|---|
| Simply.com | Simply.com A/S, CVR 29412006, Højvangen 4, 8660 Skanderborg, Denmark | Hosting of the system, database, documents, backups and product passports | Denmark | None |
| Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland | Automatic document reading (AI) of uploaded documents | [TODO: "Any country where Google has facilities" (Google's API) or "EU" (Vertex AI with an EU endpoint)] | [TODO: Google's API: yes, e.g. the United States, based on the EU-US Data Privacy Framework (Decision (EU) 2023/1795) and the Commission's standard contractual clauses (Decision (EU) 2021/914). Vertex AI in the EU: ML processing and storage in the EU; check in Google's Cloud Data Processing Addendum whether sub-processors outside the EU/EEA may access data, and state the basis here] | |
| [TODO: email provider] | [TODO] | Sending emails to users | [TODO] | [TODO] |
Google only uses the content to provide the service and to detect misuse. Google does not use it to improve its products, because we use a paid service.
Providers we use for our own purposes
These providers process data for which we are the controller, so they are not sub-processors under the data processing agreement:
| Provider | Purpose | Location |
|---|---|---|
| [TODO: payment provider] | Payment and invoicing | [TODO] |
| [TODO: accountant/bookkeeper] | Bookkeeping | [TODO] |
Changes
We notify customers at least 30 days before adding or replacing a sub-processor. The customer may object within 14 days of the notice, see Appendix B.2 of the data processing agreement and Article 28(2) GDPR.
Last changed: 29 September 2026