Sub processors - Strict
Updated: 12 Mar 2024
| Name | Description | Data type | Location | Certification & Compliance | Transfer Mechanisms | DPA | Privacy Policy | Data retention | More |
|---|---|---|---|---|---|---|---|---|---|
| Swish owned byDanske Bank, Handelsbanken, Länsförsäkringar, Nordea, SEB and Swedbank and Sparbankerna | Payment provider for tickets. | Payment info | EU/EES mainly* | GDPR | Show | ∞ | |||
| 46elks | SMS provider. | SMS, Phone numbers | Sweden | GDPR | Show | 90 days | Read more | ||
| Rule | Email provider for transactional and campaign emails. | Emails | Sweden | GDPR | Show | Show | 30 days | ||
| Heroku owned bySalesforce | Cloud hosting provider where we have our databases. | Everything | Ireland | ISO 27001 ISO 27017 ISO 27018 SOC 1 SOC 2 SOC 3 | EU-U.S. Data Privacy Framework | Show | ∞ | Read more | |
| Amazon Web Services (AWS) | AWS is the backbone of Heroku where we store our databases, exports, backups etc. | Everything | Sweden & Ireland | ISO 27001 ISO 27017 ISO 27018 ISO 27701 SOC 1 SOC 2 SOC 3 | EU-U.S. Data Privacy Framework | Show | ∞ | Read more |