Attendium AB uses the following third-party service providers ("sub-processors") to process personal data on behalf of our customers in the course of providing the Services. Each sub-processor is bound by a data processing agreement imposing data protection obligations consistent with the GDPR and our data processing agreement (available in the GDPR section of your Attendium account).
We announce additions or replacements of sub-processors in accordance with section 9 of the data processing agreement.
Current sub-processors
- Amazon Web Services EMEA SARL — hosting, storage, database, email delivery, AI inference. Processing location: EU (Ireland; AI inference within EU regions).
- Stripe — payment processing. Processing location: EU/US (PCI DSS Level 1 certified; card data is not stored by Attendium).
- Fortnox AB — invoicing and accounting. Processing location: Sweden.
- Functional Software, Inc. (Sentry) — error monitoring. Processing location: EU-hosted (EU-US Data Privacy Framework certified).
- Intercom, Inc. — customer support conversations. Processing location: US (EU-US Data Privacy Framework certified).
- Google (Google Ireland Ltd / Google LLC) — support email, geocoding, wallet passes. Processing location: EU/US.
- Apple Inc. — wallet passes and pass update notifications. Processing location: EU/US.
- Zebrafish Labs, Inc. (imgix) — image delivery and optimization for uploaded images. Processing location: US (Standard Contractual Clauses).
- Calendly LLC — scheduling of onboarding and support calls. Processing location: US (EU-US Data Privacy Framework certified).
Consent-based advertising and analytics tools (Google Analytics, Google Ads, Meta Pixel, Firebase Analytics) are not sub-processors — they are used only with your consent and are described in the privacy policy.
Questions: support@attendium.com