Personal data processed includes: employee data (name, email, job title, contract details) and customer / contact persons at client organisations (name, email, company affiliation, communication history).
Microsoft Corporation
Microsoft 365 — Exchange, Teams, SharePoint, OneDrive, Word, Excel
PurposeEmail, communication, document storage, video conferencing, collaboration platform
HQ / Legal entityUSA — One Microsoft Way, Redmond, WA 98052-6399
Data locationEU (EU Data Boundary programme). Metadata may temporarily be processed in the US.
Transfer basisEU SCC (GDPR Art. 46) + EU Data Boundary commitment
DPA / CertificationsMicrosoft DPA (Online Services Terms) · ISO 27001 · SOC 2 Type II
Configured under the EU Data Boundary programme for EU/EFTA customers. Certain diagnostic data and metadata may temporarily be processed outside the EU under SCCs.
Anthropic PBC
Claude.ai — AI-assisted text processing and document drafting
PurposeAI-assisted text processing, analysis, document drafting and internal knowledge search
HQ / Legal entityUSA — 548 Market St, PMB 90375, San Francisco, CA 94104
Data locationUSA (AWS). No EU data residency guarantee via direct API. Prompt data typically deleted after 30 days.
Transfer basisEU SCC (GDPR Art. 46). Anthropic DPA incorporated in Commercial Terms of Service.
DPA / CertificationsAnthropic DPA (Jan. 2026) · ISO 27001:2022 · ISO 42001 · SOC 2 Type I & II
Data is primarily processed in the US. For guaranteed EU data residency, AWS Bedrock EU inference profiles or Google Vertex AI EU regional endpoints should be considered. Prompts containing personal data should be minimised.
Slack Technologies Limited
Slack — Internal team communication and file sharing
PurposeInternal team communication, messaging, file sharing and collaboration
HQ / Legal entityIreland — Salesforce Tower, North Dock, Dublin D01 W2Y3 (Salesforce group, parent USA)
Data locationUSA (AWS). EU data residency available on Enterprise Grid plan only.
Transfer basisEU SCC (GDPR Art. 46). Slack Technologies Limited is the EU data processor entity.
DPA / CertificationsSlack DPA · ISO 27001:2022 · ISO 27017 · ISO 27018 · ISO 27701 · SOC 2 Type II
EU data residency is only available on Enterprise Grid. On standard/Pro plans, message and file data is stored in the US.
Zenegy Danmark ApS
Zenegy — Payroll, HR and salary processing
PurposePayroll, HR administration, salary processing and employee data management. Includes CPR numbers, salary, pension.
HQ / Legal entityDenmark — Slotsmarken 16, 2970 Hørsholm (CVR: 38366041)
Data locationEU/EEA. Production in Azure West Europe (Amsterdam). Test in Azure North Europe (Dublin).
Transfer basisNo third-country transfer (processor established in EU).
DPA / CertificationsZenegy DPA (GDPR Art. 28) · ISAE 3402 Type II (PwC, annual audit)
e-conomic danmark A/S
e-conomic — Cloud accounting and invoicing
PurposeAccounting, invoicing, financial reporting and bookkeeping
HQ / Legal entityDenmark — Dampfærgevej 26, 2100 Copenhagen Ø (CVR: 20699210) (Visma group, parent Norway)
Data locationEU/EEA. Data hosted in Microsoft Azure EU regions.
Transfer basisNo third-country transfer (processor established in EU).
DPA / Certificationse-conomic DPA (GDPR Art. 28) · ISO 27001 · SOC 2 Type II
Pumble Inc. (COING d.o.o.)
Pumble — Internal team communication and messaging
PurposeInternal team communication, direct messaging and channel-based collaboration
HQ / Legal entitySlovenia — Vojkova cesta 63, 1000 Ljubljana (COING d.o.o.) · US entity: Pumble Inc., Wilmington, DE
Data locationEU (AWS Frankfurt, eu-central-1).
Transfer basisNo third-country transfer for EU-stored data. EU SCC (GDPR Art. 46) covers US parent entity.
DPA / CertificationsPumble DPA (GDPR Art. 28) · SOC 2 Type II
Categories of personal data
Data processed by sub-processors
Employee data
- Name and email address
- Job title and contractual details
- CPR number
- Salary and pension details
- Bank details
Customer data (contact persons)
- Name and email address
- Phone number
- Company affiliation
- Communication history
Questions about this list?
Contact our data protection responsible for more information or to request documentation.