Sub processors

Required
Name Description Data type Location Certification & Compliance Transfer Mechanisms DPA Privacy Policy Data retention More
Heroku

owned by Salesforce

Cloud hosting provider where we have our databases. Everything Ireland
ISO 27001 ISO 27017 ISO 27018 SOC 1 SOC 2 SOC 3
EU-U.S. Data Privacy Framework Show Read more
Amazon Web Services (AWS) AWS is the backbone of Heroku where we store our databases, exports, backups etc. Everything Sweden & Ireland
ISO 27001 ISO 27017 ISO 27018 ISO 27701 SOC 1 SOC 2 SOC 3
EU-U.S. Data Privacy Framework Show Read more

Optional
Name Description Data type Location Certification & Compliance Transfer Mechanisms DPA Privacy Policy Data retention More
Swish

owned by Danske Bank, Handelsbanken, Länsförsäkringar, Nordea, SEB and Swedbank and Sparbankerna

Payment provider for tickets. Payment info EU/EES mainly*

* I undantagsfall kan överföring av personuppgifter till tredje land ske via Getswish underleverantörer. Vid sådana överföringar säkerställer Getswish att lämpliga skyddsåtgärder har vidtagits enligt reglerna i dataskyddsförordningen.

GDPR Show Read more
46elks SMS provider. SMS, Phone numbers Sweden
GDPR Show 90 days Read more
Rule Email provider for transactional and campaign emails. Emails Sweden
GDPR Show Show 30 days Read more
Stripe Payment provider for tickets. Credit Cards and Payment info USA
PCI Level 1 SOC 1 SOC 2
EU-U.S. Data Privacy Framework Show Show Read more
SendGrid

owned by Twilio

Email provider for transactional and campaign emails. Emails USA
PCI DSS Level 4 SOC 2
EU-U.S. Data Privacy Framework Show Show 30 days Read more
Mandrill

owned by Mailchimp, Intuit

Email provider for transactional and campaign emails. Emails USA
ISO 27001 SOC 2 SOC 3
EU-U.S. Data Privacy Framework Show Show 30 days Read more
Vonage

owned by Ericsson

Livestream video & chats provider. Livestream chat names, Livestream video USA
SOC 2 HIPAA
Standard Contractual Clauses (SCC) Show Show 20 days Read more