Sub-processors
The parties that process personal data on behalf of WeOffice AB when we act as a processor for a customer.
4 of 6 rows are not yet confirmed. Each such row states below what is missing, who can answer, and what the row becomes once the answer arrives.
Approved list of sub-processors
The list in Appendix 2 of the customer agreement — the parties that process the Customer's data on WeOffice's instructions.
Hetzner Online GmbH Confirmed
Role: Hosting of both zones · Country: Germany and Finland
Confirmed since: 2026-09-05 · Agreement: Data processing agreement v1.2 (2026-02-16), concluded in the Hetzner account on 2026-09-05 by WeOffice AB (customer no. K0950154926). A copy, the subcontractor annex and TÜV Rheinland's review of the security measures are in `Avtal/leverantorer/hetzner/`.
Loopia AB Open
Role: Email for Danadot's mailboxes and the app's own email (accounts, password resets, notices). Survey invitations and reminders have gone through Scaleway SAS since 2026-10-27, not Loopia. · Country: Sweden (the storage location for message data and logs is not confirmed)
- What is missing
- Three things: the agreement annex actually in force for the account, Loopia's own list of sub-processors, and where message data, logs and the suppression list are stored geographically and for how long.
- Who can answer
- Loopia's business support. The questions have already been put as L-1, L-2 and L-5 in the letter about the sub-processor model — the answer is pending; the question is not unasked.
- What the row becomes
- A confirmed country and retention period, plus Loopia's own sub-processors as a level of their own beneath this row.
- Blocker
- B-16
Mistral AI SAS Confirmed
Role: Production of the agreed AI-based analytical texts from aggregated and delimited project data (the La Plateforme/Studio API service, through the provider's EU region). No survey answers at individual level and no participant lists are provided to the provider. Zero Data Retention is enabled and training on the data is switched off. The provider checks the content automatically to enforce its terms (moderation) and is a controller in its own right for that check. · Country: France; model execution takes place within the EU/EEA. The provider's own sub-processors for security and traffic routing (Cloudflare, CrowdStrike) are also located outside the EU/EEA
Confirmed since: 2026-09-25 · Agreement: Commercial Terms of Service (effective 2026-08-05) with the Data Processing Addendum (effective 2026-07-27), accepted on 2026-09-15 by WeOffice AB and confirmed by Mistral on 2026-09-25 (case #36679471); Zero Data Retention granted on 2026-09-25. Copies and Mistral's confirmation are in `Avtal/leverantorer/mistral/`.
Scaleway SAS Open
Role: Two services. Generative APIs: production of the agreed AI-based analytical texts from aggregated and delimited project data. No survey answers at individual level and no participant lists are provided to the provider. Transactional Email, since 2026-10-27: survey invitations and reminders. That service does receive each recipient's email address, the sender name and the text of the email with the personal survey link, but no survey answers. · Country: France; processing within the EU/EEA
- What is missing
- The processing agreement is not confirmed here. The terms and the data processing agreement (version 2024-06-01) have been archived since 2026-09-14; the agreement is part of the account and is accepted with it. What is missing is the agreement version and date for the account that sends the survey emails, and Appendix 2 and the DPIA covering the email service: Appendix 2 names only Generative APIs and gives Loopia for the invitations. The email service has been used since 2026-10-27; the AI service is not used.
- Who can answer
- Somebody with the mandate to bind WeOffice AB, who confirms that the Scaleway account is covered by the processing agreement, states its version and date and decides on Appendix 2 and the DPIA.
- What the row becomes
- A confirmed row with agreement version and date covering both Transactional Email and Generative APIs. Only then may the Scaleway AI profile be activated, in a release.
- Blocker
- DPA-Scaleway
Processing that is not a sub-processor
The rows below remain as worklists but are not part of the list in Appendix 2. The agreement's reason: Payment services, accounting and the use of Microsoft for WeOffice's own administrative purposes are not included in this list.
Stripe Open
Role: Card payment — and, for its own purposes, a controller in its own right · Country: United States (Stripe, Inc.), with sub-processors in several countries per the published list
- What is missing
- Not the details — those were read on 5 September 2026: processing agreement, storage location (United States), sub-processors and 30 days' notice, with transfers under a Data Transfer Addendum invoking the EU-US Data Privacy Framework and the standard contractual clauses (2021/914). What is missing is that somebody with the mandate reads and ACCEPTS those terms on behalf of WeOffice AB, with a date. This row is a release gate, not a development gate: test mode is not blocked.
- Who can answer
- Somebody with the mandate to bind WeOffice AB. The question is no longer what applies, but who signs off that we accept it.
- What the row becomes
- A confirmed row with the date of acceptance.
- Blocker
- B-18
Microsoft Open
Role: Storage of working material for as long as the workspace is OneDrive-synced · Country: The tenant's storage location is not confirmed
- What is missing
- Where the Microsoft 365 tenant actually stores data. This row is not meant to be confirmed but to DISAPPEAR: it exists only for as long as the working material sits in a OneDrive-synced folder, and the move away from there has already been decided.
- Who can answer
- The Microsoft 365 portal, which requires a tenant administrator. The storage location is under the tenant's data settings.
- What the row becomes
- The row is struck from the list once the move is complete and receipted. Until then it stays here as a worklist — outside the list in Appendix 2, which does not count the use of Microsoft for WeOffice's own purposes as a sub-processor.
- Blocker
- B-28