Underdatabehandlere

Agendaflow (drevet av Agendafix AS, Norge) bruker følgende underdatabehandlere for å levere tjenesten. Kundeinnhold lagres i EU (Frankfurt, Tyskland). Der en underdatabehandler behandler data i USA, er overføringen beskyttet av EU-kommisjonens standard personvernbestemmelser (SCC), supplert av EU–US Data Privacy Framework der leverandøren har gyldig sertifisering.

Supabase, Inc.

FormålApplication database, file storage, authentication

DataAll customer content and account data

StedEU (Frankfurt, Germany)EU

OverføringsgrunnlagData stays in EU; SCCs (support access only)

Vercel, Inc.

FormålApplication hosting and content delivery

DataData in transit through the application

StedGlobal edge; US entity

OverføringsgrunnlagSCCs + EU–US Data Privacy Framework (certified)

Stripe, Inc.

FormålPayment processing

DataBilling contact and subscription data (card data held by Stripe only)

StedUS/EU

OverføringsgrunnlagSCCs + EU–US Data Privacy Framework (certified)

Anthropic, PBC

FormålAI text generation when a user invokes an AI feature

DataAgenda text content actively submitted by the user

StedUS

OverføringsgrunnlagSCCs (auto-incorporated in Anthropic's DPA); no training on API content

OpenAI, LLC

FormålEmbeddings for semantic exercise search

DataSearch/AI-assist query text only

StedUS

OverføringsgrunnlagSCCs; API content not used for training

OpenRouter, Inc.

FormålAI request failover routing (only if Anthropic is unavailable)

DataAgenda text content of the failed-over request

StedUS

OverføringsgrunnlagSCCs; account-level Zero-Data-Retention routing

Google LLC

FormålIn-app preview of uploaded Office documents

DataThe document being previewed

StedUS/global

OverføringsgrunnlagSCCs + EU–US Data Privacy Framework (certified)

Resend, Inc.

FormålTransactional email

DataRecipient name/email, email content

StedUS

OverføringsgrunnlagSCCs

Loops.so

FormålMarketing email (opt-in only)

DataName/email of opted-in users

StedUS

OverføringsgrunnlagSCCs

PostHog, Inc.

FormålProduct analytics

DataUsage events, email identifier; no content capture, no session recording

StedEU (Frankfurt — PostHog EU Cloud)EU

OverføringsgrunnlagEU hosting; EU–US Data Privacy Framework (certified)

Underdatabehandler	Formål	Data	Sted	Overføringsgrunnlag
Supabase, Inc.	Application database, file storage, authentication	All customer content and account data	EU (Frankfurt, Germany)EU	Data stays in EU; SCCs (support access only)
Vercel, Inc.	Application hosting and content delivery	Data in transit through the application	Global edge; US entity	SCCs + EU–US Data Privacy Framework (certified)
Stripe, Inc.	Payment processing	Billing contact and subscription data (card data held by Stripe only)	US/EU	SCCs + EU–US Data Privacy Framework (certified)
Anthropic, PBC	AI text generation when a user invokes an AI feature	Agenda text content actively submitted by the user	US	SCCs (auto-incorporated in Anthropic's DPA); no training on API content
OpenAI, LLC	Embeddings for semantic exercise search	Search/AI-assist query text only	US	SCCs; API content not used for training
OpenRouter, Inc.	AI request failover routing (only if Anthropic is unavailable)	Agenda text content of the failed-over request	US	SCCs; account-level Zero-Data-Retention routing
Google LLC	In-app preview of uploaded Office documents	The document being previewed	US/global	SCCs + EU–US Data Privacy Framework (certified)
Resend, Inc.	Transactional email	Recipient name/email, email content	US	SCCs
Loops.so	Marketing email (opt-in only)	Name/email of opted-in users	US	SCCs
PostHog, Inc.	Product analytics	Usage events, email identifier; no content capture, no session recording	EU (Frankfurt — PostHog EU Cloud)EU	EU hosting; EU–US Data Privacy Framework (certified)

Endringer i denne listen

Vi varsler kontoeiere på e-post minst 30 dager før vi legger til eller bytter ut en underdatabehandler som behandler kundeinnhold. Hvis du protesterer på saklig personvernfaglig grunnlag og vi ikke får løst innvendingen, kan du si opp den berørte tjenesten med forholdsmessig refusjon av forhåndsbetalte beløp, slik det fremgår av databehandleravtalen vår.