Sub processors
Updated: 12 Mar 2024
Required | |||||||||
---|---|---|---|---|---|---|---|---|---|
Name | Description | Data type | Location | Certification & Compliance | Transfer Mechanisms | DPA | Privacy Policy | Data retention | More |
Elastx | Cloud hosting provider where we have our databases. | Everything | Sweden |
ISO 27001
ISO 27017
ISO 27018
ISO 14001
|
GDPR | ∞ | Read more | ||
Heroku
owned by Salesforce |
Cloud hosting provider where we have our databases. | Everything | Ireland |
ISO 27001
ISO 27017
ISO 27018
SOC 1
SOC 2
SOC 3
|
EU-U.S. Data Privacy Framework | Show | ∞ | Read more | |
Amazon Web Services (AWS) | AWS is the backbone of Heroku where we store our databases, exports, backups etc. | Everything | Sweden & Ireland |
ISO 27001
ISO 27017
ISO 27018
ISO 27701
SOC 1
SOC 2
SOC 3
|
EU-U.S. Data Privacy Framework | Show | ∞ | Read more | |
Optional | |||||||||
Name | Description | Data type | Location | Certification & Compliance | Transfer Mechanisms | DPA | Privacy Policy | Data retention | More |
Swish
owned by Danske Bank, Handelsbanken, Länsförsäkringar, Nordea, SEB and Swedbank and Sparbankerna |
Payment provider for tickets. | Payment info |
EU/EES mainly*
* I undantagsfall kan överföring av personuppgifter till tredje land ske via Getswish underleverantörer. Vid sådana överföringar säkerställer Getswish att lämpliga skyddsåtgärder har vidtagits enligt reglerna i dataskyddsförordningen. |
|
GDPR | Show | ∞ | Read more | |
46elks | SMS provider. | SMS, Phone numbers | Sweden |
|
GDPR | Show | 90 days | Read more | |
Rule | Email provider for transactional and campaign emails. | Emails | Sweden |
|
GDPR | Show | Show | 30 days | Read more |
Stripe | Payment provider for tickets. | Credit Cards and Payment info | USA |
PCI Level 1
SOC 1
SOC 2
|
EU-U.S. Data Privacy Framework | Show | Show | ∞ | Read more |
SendGrid
owned by Twilio |
Email provider for transactional and campaign emails. | Emails | USA |
PCI DSS Level 4
SOC 2
|
EU-U.S. Data Privacy Framework | Show | Show | 30 days | Read more |
Mandrill
owned by Mailchimp, Intuit |
Email provider for transactional and campaign emails. | Emails | USA |
ISO 27001
SOC 2
SOC 3
|
EU-U.S. Data Privacy Framework | Show | Show | 30 days | Read more |
Vonage
owned by Ericsson |
Livestream video & chats provider. | Livestream chat names, Livestream video | USA |
SOC 2
HIPAA
|
Standard Contractual Clauses (SCC) | Show | Show | 20 days | Read more |