Last updated: 2 October 2026

Subprocessors and connected services

Data is shared with authorised customer managers and with tenants, workers, vendors and owners within the case or agreement they may access. The service providers below may process data when the relevant feature is configured. Regions and transfer grounds must be confirmed in deployment settings and provider agreements; the code alone does not establish that all processing stays in the EEA. The list is not evidence of signed agreements.

  • Vercel

    Purpose
    Hosting and temporary import storage
    Data
    Requests, IP addresses, sessions, operational logs and uploaded import files
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    When the platform is deployed with this provider.

  • Neon

    Purpose
    PostgreSQL database
    Data
    Database contacts, applications, tenancies, cases, messages and operational evidence
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    When the platform is deployed with this provider.

  • Cloudflare R2

    Purpose
    Private object storage
    Data
    Documents, photos, metadata, audio and derivatives
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    When the platform is deployed with this provider.

  • OpenRouter

    Purpose
    Model routing for drafts, translation and evidence reading
    Data
    Selected text, images and document content that may contain personal data
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Anthropic, OpenAI, Google, xAI, DeepSeek, Mistral

    Purpose
    Models selected through OpenRouter
    Data
    The selected content in the model call; the actual inference route needs confirmation
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Through the selected model route in OpenRouter. Model and actual inference provider may change; confirm the allowed route before use.

  • LINK Mobility

    Purpose
    Inbound and outbound SMS
    Data
    Phone numbers, message content, links and delivery metadata
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Resend

    Purpose
    Inbound and outbound email
    Data
    Email addresses, messages, links, attachments and delivery metadata
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Zadarma

    Purpose
    Telephony and call connection
    Data
    Phone numbers, extensions, call timing and status. Maintenance calls are not recorded. Enabled Leads and Communications calls may be recorded with PM acknowledgement of call authority and the required recipient notice; recordings enter private custody
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • ElevenLabs

    Purpose
    Speech to text and deliberate voice notes
    Data
    Audio, transcripts, language and metadata
    Location
    Speech transcription can use an EU endpoint after EU contract confirmation. Other audio paths use the standard endpoint. Confirm region per feature.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Idura

    Purpose
    BankID and document signing
    Data
    Identity and signature details, contracts and signing evidence
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Keyhole

    Purpose
    Tenancy security and related identity workflow
    Data
    Contact and identity details, lease and security or claim data
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Sentry

    Purpose
    Error monitoring
    Data
    Errors, stack traces and filtered technical request metadata
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Daily

    Purpose
    Video viewings
    Data
    Participant names, viewing metadata and audio/video. Video viewings may be recorded and transcribed after the participant consent choice; the participant and host can join without recording
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Google Workspace / Google OAuth

    Purpose
    Optional sign-in, calendar and Meet imports
    Data
    Account identity, OAuth access, appointment metadata and selected meeting transcripts
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Upstash / Vercel KV

    Purpose
    Optional rate limiting
    Data
    Derived client or IP keys, counters and expiry times
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Dun & Bradstreet / Bisnode

    Purpose
    Credit assessment
    Data
    Identity, national identity number and credit information when the credit workflow is used
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Parallel

    Purpose
    Property and market research
    Data
    Address and search context and publicly available listing information
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • OpenStreetMap / Nominatim / Overpass

    Purpose
    Address lookup and maps
    Data
    Search text, addresses, map coordinates and technical browser metadata when using maps
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • Brønnøysundregistrene, Kartverket / Geonorge, Entur, SSB

    Purpose
    Public company, address, transport and market lookups
    Data
    Organisation numbers, addresses, coordinates and bounded query context
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.

  • DuckDuckGo

    Purpose
    Product and address information lookup
    Data
    Product descriptions, addresses or search text
    Location
    Region is account and deployment dependent. Not established by code; confirmation required.
    Transfer basis
    Agreement and actual access need confirmation. Transfers outside the EEA require a valid basis, such as adequacy or separate transfer clauses with necessary supplementary measures. 2021/915 is not a transfer safeguard.
    When used
    Only when the integration or relevant feature is configured and used.