Legal. Sub-processors | Mesh Nordic AI

Introduction

A sub-processor is a third-party data processor engaged by us* who has or potentially will have access to or process personal data and/or protected data. We* engage different types of sub-processors to perform various functions as explained below. Ie. infrastructure services, customer support, service administration services, email notifications etc.
Please note that not all sub-processors are used in the provision of all services we provide and some may only be involved in assisting with the provision of specific services. If you have any questions - please don't hesitate to contact us.

* Mesh Nordic AI AB ("Mesh Nordic", "us", "we", or "our"), org. no. 559466-2057 with address Box 3090, 211 65 Malmö, Sweden. The international company name is Mesh Nordic AI Limited.

Sub-processors wherewe are the processor

Systems that may handle our customer's customers' personal data.

Infrastructure sub-processors

DigitalOcean, LLC
Data storage, server capacity, cloud services and IT infrastructure.
Data processing policy: https://www.digitalocean.com/legal/data-processing-agreement
Is data transferred outside the EU?No
Location: Data is stored in Amsterdam, Europe.
Appdrag Limited trading (Elestio)
DevOps platform to deploy code, open-source software and IT infrastructure.
Data processing policy: https://docs.elest.io/books/legal-compliance/page/elestio-data-processing-agreement
Is data transferred outside the EU?No
Company location: Ireland, Europe.
Data center location: Data is stored by DigitalOcean, LLC in Amsterdam, Europe.

General sub-processors

Freshworks Inc.
CRM, project management, internal communication system and support system.Manages contact details to our leads, customers and partners.
Data processing policy: https://www.freshworks.com/data-processing-addendum/ and https://www.freshworks.com/privacy/
Is data transferred outside the EU?Yes, using EU-U.S. Data Privacy Framework (DPF*).
Data center location: Amazon Web Services (AWS), USA and EU.
Bugsnag Inc.
Automatically tracks and reports from our applications. Error-monitoring tool that allows developers to identify bugs.In exceptional cases this software may handle personal data from automatic error reports.
Data processing policy: https://docs.bugsnag.com/security/overview/
Is data transferred outside the EU?Yes (SCC**)
Data center location: Google Cloud Platform, USA.
Google LLC (Gmail)
Google email (Gmail) service used for our website and also for sharing files within our company.It might also handle our customer's customers' personal data within the confines of our customer's request.
Data processing policy: https://cloud.google.com/terms/data-processing-addendum and https://policies.google.com/privacy/frameworks?hl=en-US
Is data transferred outside the EU?Yes, using SCC** and EU-U.S. Data Privacy Framework (DPF*).
Data center location: Google Cloud Platform, USA and EU.
Shopify Inc.
Shopify is the worlds biggest rental e-commerce platform. If our customer, the e-tailer, uses Shopify as their e-commerce platform, they must approve Shopify's terms. They also need to install our app, M:AI, from Shopify's App Store to start using our AI platform.
Data processing policy: https://www.shopify.com/legal/dpa
Is data transferred outside the EU?Yes, using SCC** and EU-U.S. Data Privacy Framework (DPF*).
Data center location: Google Cloud Platform, USA.

Sub-processors wherewe are the data controller

Systems that handle our customers' personal data.

Infrastructure sub-processors

DigitalOcean, LLC
Data storage, server capacity, cloud services and IT infrastructure.
Data processing policy: https://www.digitalocean.com/legal/data-processing-agreement
Is data transferred outside the EU?No
Data center location: Amsterdam, Europe.
Appdrag Limited trading (Elestio)
DevOps platform to deploy code, open-source software and IT infrastructure.
Data processing policy: https://docs.elest.io/books/legal-compliance/page/elestio-data-processing-agreement
Is data transferred outside the EU?No
Company location: Ireland, Europe.Data center location: Data is stored by DigitalOcean, LLC in Amsterdam, Europe.

General sub-processors

Freshworks Inc.
CRM, project management, internal communication system and support system.Manages contact details to our leads, customers and partners.
Data processing policy: https://www.freshworks.com/data-processing-addendum/ and https://www.freshworks.com/privacy/
Is data transferred outside the EU?Yes, using EU-U.S. Data Privacy Framework (DPF*).
Data center location: Amazon Web Services (AWS), USA and EU.
Shopify Inc.
Shopify is the worlds biggest rental e-commerce platform. If our customer, the e-tailer, uses Shopify as their e-commerce platform, they must approve Shopify's terms. They also need to install our app, M:AI, from Shopify's App Store to start using our AI platform.
Data processing policy: https://www.shopify.com/legal/dpa
Is data transferred outside the EU?Yes, using SCC** and EU-U.S. Data Privacy Framework (DPF*).
Data center location: Google Cloud Platform, USA.
Featurebase
Help Center, Product Feedback, Roadmap & Changelog Platform.Manages feedback and comments from customers and partners.
Data processing policy: https://help.featurebase.app/en/articles/8874192-is-featurebase-gdpr-compliant
Is data transferred outside the EU?No
Data center location: Digital Ocean, Germany, Europe.
Bugsnag Inc.
Automatically tracks and reports from our applications. Error-monitoring tool that allows developers to identify bugs.In exceptional cases this software may handle personal data from automatic error reports.
Data processing policy: https://docs.bugsnag.com/security/overview/
Is data transferred outside the EU?Yes (SCC**)
Data center location: Google Cloud Platform, USA.
Google LLC (Gmail)
Google email (Gmail) service used for our website and also for sharing files within our company.
Data processing policy: https://cloud.google.com/terms/data-processing-addendum and https://policies.google.com/privacy/frameworks?hl=en-US
Is data transferred outside the EU?Yes, using SCC** and EU-U.S. Data Privacy Framework (DPF*).
Data center location: Google Cloud Platform, USA and EU.
Google LLC (Google Analytics)
Google Analytics is a service used for our website for statistical purposes to measure traffic, visitors and clicks on our website.
Data processing policy: https://privacy.google.com/businesses/processorterms/
Is data transferred outside the EU?Yes, using SCC** and EU-U.S. Data Privacy Framework (DPF*).
Data center location: Google Cloud Platform, USA and EU.
Discord Inc.
Chat software used for communication both internally within our company, and externally with our partners.

Data processing policy: https://discord.com/privacy

Is data transferred outside the EU?
Yes (SCC**)
Hotjar Limited
Statistics and analytics software used by our homepage.

Data processing policy: https://www.hotjar.com/legal/

Is data transferred outside the EU?
Yes (SCC**)
Foo Monk, LLC (Instantly)
Email sending, leads and marketing software used to market our products.They store data regarding potential customers to us.
Data processing policy: https://instantly.ai/dpa
Is data transferred outside the EU?Yes (SCC**)
Usercentrics A/S (Cookiebot)
Consent Management Platform (CMP) that helps us manage our customers' cookies and online tracking compliances with GDPR and CCPA.
Data processing policy: https://www.cookiebot.com/en/legal-notice/
Is data transferred outside the EU?No
Data center location: Microsoft Azure, Ireland, Europe.
Intuit Mailchimp
Marketing, automation & email platform to contact and engage our customers.
It's used both separately by us and by your homepage to build closer relationships with our customers.

Data processing policy: https://mailchimp.com/gdpr/

Is data transferred outside the EU?
Yes (SCC**)
Stripe, Inc.
Card payment service to pay for our Services using VISA, Mastercard etc.

Data processing policy: https://stripe.com/se/legal/dpa

Is data transferred outside the EU?
Yes (SCC**)
Jetimpex, Inc. (Weblium)
Our homepage provider, used for website building.
Data processing policy: https://weblium.com/privacy-policy
Is data transferred outside the EU?No
Data center location: Google Cloud Platform, EU (Belgium).
Calendly, LLC
On our homepage we use Calendly for booking demos with potential customers. It's an appointment scheduling software provider.
Data processing policy: https://calendly.com/legal/data-processing-addendum
Is data transferred outside the EU?Yes, using EU-U.S. Data Privacy Framework (DPF*).
Data center location: USA.
Fortnox AB
Invoicing and accounting platform used internally within our company.
Data processing policy: https://www.fortnox.se/om-fortnox/integritet-och-sakerhet/gdpr
Is data transferred outside the EU?No
JHM Revision AB
Invoicing and accounting service used internally within our company.

Is data transferred outside the EU?
No
Ludvig & Co AB
Invoicing and accounting service used internally within our company.
Data processing agreement (in Swedish): Ludvig & Co Personuppgiftsbiträdesavtal
Is data transferred outside the EU?No

* DPF = EU-U.S. Data Privacy Framework, For more information https://www.dataprivacyframework.gov** SCC = Standard contractual clauses, approved under European Commission Decision 2021/914 of 4 June 2021.