Sub-processors
Last updated: October 10, 2026
These are the sub-processors Inzenda engages to process personal data on the customer's behalf under our data processing agreement (DPA). The list is the same as Appendix 2 of the DPA. We give notice of any intended addition or replacement at least 30 days before the change takes effect, by email to the account's email address and by updating this page.
| Sub-processor | Service | Data processed | Storage location | Safeguard for transfers outside the EU/EEA |
|---|---|---|---|---|
| Sub-processorVercel Inc., US | ServiceHosting of the application and server functions, file storage (Vercel Blob) for receipts and signatures, logs, protection against automated requests | Data processedAll categories in Appendix 1 while processed; files | Storage locationFunctions: Frankfurt (fra1). File storage: Stockholm (arn1) | Safeguard for transfers outside the EU/EEAEU-US DPF and standard contractual clauses |
| Sub-processorNeon (Databricks Inc.), US | ServiceDatabase (PostgreSQL) and backups | Data processedAll categories in Appendix 1 except files | Storage locationFrankfurt (aws-eu-central-1) | Safeguard for transfers outside the EU/EEAEU-US DPF and standard contractual clauses |
| Sub-processorResend (Plus Five Five Inc.), US | ServiceSending email, for example reminders and confirmations | Data processedRecipient's email address, company name and period details in the message (no personal identity numbers or salary amounts) | Storage locationSending via eu-west-1 (Ireland); logs in the US | Safeguard for transfers outside the EU/EEAEU-US DPF and standard contractual clauses |
| Sub-processorFunctional Software Inc. (Sentry), US | ServiceError reports | Data processedTechnical data about errors; personal identity numbers are masked before sending; occasional data in error messages may occur | Storage locationEU (Germany, de.sentry.io) | Safeguard for transfers outside the EU/EEAEU-US DPF and standard contractual clauses |
| Sub-processorGoogle Ireland Ltd (Google Workspace) | ServiceSupport email, if the Customer sends personal data to support | Data processedWhat the Customer sends | Storage locationEU and US | Safeguard for transfers outside the EU/EEAStandard contractual clauses |
Not sub-processors: Bolagsverket and Skatteverket (authorities that receive and provide data as controllers in their own right) and Stripe (processes only payment data about the account holder, not data about the Customer's employees or counterparties).
Questions about the sub-processors: privacy@inzenda.se.