Section Settings
Sub-processors
Finago as a Data Processor - What we deliver to customers
Finago Office
| Sub-processor | Description of activities | Data Center Location |
| Iteams Braathe AS | Main data center, operating and data storage | EEA (Norway) |
| Amazon Web Services (AWS) | Data center, operating and data storage. | EU (Ireland) |
| Energi.ai | AI functionality for ESG reporting and analytics | UK |
| Mailgun Technologies, Inc. | Email module for sending password reset messages to users | EU (Ireland) |
| Microsoft Inc. | Storage and service bus tool (event management and producing PDF invoices) | EEA (Ireland, Norway) |
| JCloud AS | Electronic invoices and email provider | EEA (Norway) |
| Okta Inc. | Secure authentication provider | EU (Germany) |
| OpenAI Ireland Ltd. | Voucher processing functionality | EU (Ireland) |
| XFO Financials Inc. (Vic.ai) | Artificial intelligence functionality | EU (Sweden) |
Finago Payday
| Sub-processor | Description of activities | Data Center Location |
| Iteams Braathe AS | Main data center, operating and storage | EEA (Norway) |
| Kivra AB | Distribution of pay slips | EU (Sweden, Finland) |
| Taggun Inc. | OCR recognition of receipts | EU (France) |
Finago Busy
| Sub-processor | Description of activities | Data Center Location |
| Amazon Web Services (AWS) | Data center, operating and storage | EU (Ireland) |
| Google Cloud GCP (Firebase) | Cloud service provider | EU (Ireland) |
| Stripe Inc. | Payment processing service |
USA EU (Ireland) |
Finago Control
| Sub-processor | Description of activities | Data Center Location |
| Telia Cygate AB | Data center, operating and storage | EU (Sweden) |
| Roaring Group AB | Retrieves corporate details, including board members, beneficial ownership, PEP control, and sanction lists | EU (Sweden) |
| Kivra AB | Document signing and delivery service | EU (Sweden) |
| Criipto ApS | Document signing and delivery service | EU |
| CGI Sverige AB | BankID signing service | EU |
Some subprocessors only process data when the Customer uses specific services or operates in certain countries. Additionally, other sub-processors may be used for personal data processing if explicitly defined in the agreement between the Supplier and the Customer.
Any international transfer of data will be based on an adequacy decision by the Commission or, alternatively, standard contractual clauses and appropriate safeguards will be implemented.