Sub-processors
The parties that process personal data on behalf of WeOffice AB when we act as a processor for a customer.
4 of 6 rows are not yet confirmed. Each such row states below what is missing, who can answer, and what the row becomes once the answer arrives.
Approved list of sub-processors
The list in Appendix 2 of the customer agreement — the parties that process the Customer's data on WeOffice's instructions.
Hetzner Online GmbH Confirmed
Role: Hosting of both zones · Country: Germany and Finland
Confirmed since: 2026-09-05 · Agreement: Data processing agreement v1.2 (2026-02-16), concluded in the Hetzner account on 2026-09-05 by WeOffice AB (customer no. K0950154926). A copy, the subcontractor annex and TÜV Rheinland's review of the security measures are in `Avtal/leverantorer/hetzner/`.
Loopia AB Open
Role: Email channel for survey distribution · Country: Sweden (the storage location for message data and logs is not confirmed)
- What is missing
- Three things: the agreement annex actually in force for the account, Loopia's own list of sub-processors, and where message data, logs and the suppression list are stored geographically and for how long.
- Who can answer
- Loopia's business support. The questions have already been put as L-1, L-2 and L-5 in the letter about the sub-processor model — the answer is pending; the question is not unasked.
- What the row becomes
- A confirmed country and retention period, plus Loopia's own sub-processors as a level of their own beneath this row.
- Blocker
- B-16
Mistral AI SAS Confirmed
Role: Production of the agreed AI-based analytical texts from aggregated and delimited project data (the La Plateforme/Studio API service, through the provider's EU region). No survey answers at individual level and no participant lists are provided to the provider. Zero Data Retention is enabled and training on the data is switched off. The provider checks the content automatically to enforce its terms (moderation) and is a controller in its own right for that check. · Country: France; model execution takes place within the EU/EEA. The provider's own sub-processors for security and traffic routing (Cloudflare, CrowdStrike) are also located outside the EU/EEA
Confirmed since: 2026-09-25 · Agreement: Commercial Terms of Service (effective 2026-08-05) with the Data Processing Addendum (effective 2026-07-27), accepted on 2026-09-15 by WeOffice AB and confirmed by Mistral on 2026-09-25 (case #36679471); Zero Data Retention granted on 2026-09-25. Copies and Mistral's confirmation are in `Avtal/leverantorer/mistral/`.
Scaleway SAS Open
Role: Production of the agreed AI-based analytical texts from aggregated and delimited project data (the Generative APIs service). No survey answers at individual level and no participant lists are provided to the provider. · Country: France; processing within the EU/EEA
- What is missing
- Processing agreement not concluded. Appendix 2 refers to a data processing agreement under the provider's terms for business customers, but WeOffice AB has not concluded it and the terms have not been read in the original. Until then the provider is not used.
- Who can answer
- Somebody with the mandate to bind WeOffice AB, who concludes and archives Scaleway's terms for business customers and reads them in the original — not second-hand.
- What the row becomes
- A confirmed row with agreement version and date. Only then may the Scaleway AI profile be activated, in a release.
- Blocker
- DPA-Scaleway
Processing that is not a sub-processor
The rows below remain as worklists but are not part of the list in Appendix 2. The agreement's reason: Payment services, accounting and the use of Microsoft for WeOffice's own administrative purposes are not included in this list.
Stripe Open
Role: Card payment — and, for its own purposes, a controller in its own right · Country: United States (Stripe, Inc.), with sub-processors in several countries per the published list
- What is missing
- Not the details — those were read on 5 September 2026: processing agreement, storage location (United States), sub-processors and 30 days' notice, with transfers under a Data Transfer Addendum invoking the EU-US Data Privacy Framework and the standard contractual clauses (2021/914). What is missing is that somebody with the mandate reads and ACCEPTS those terms on behalf of WeOffice AB, with a date. This row is a release gate, not a development gate: test mode is not blocked.
- Who can answer
- Somebody with the mandate to bind WeOffice AB. The question is no longer what applies, but who signs off that we accept it.
- What the row becomes
- A confirmed row with the date of acceptance.
- Blocker
- B-18
Microsoft Open
Role: Storage of working material for as long as the workspace is OneDrive-synced · Country: The tenant's storage location is not confirmed
- What is missing
- Where the Microsoft 365 tenant actually stores data. This row is not meant to be confirmed but to DISAPPEAR: it exists only for as long as the working material sits in a OneDrive-synced folder, and the move away from there has already been decided.
- Who can answer
- The Microsoft 365 portal, which requires a tenant administrator. The storage location is under the tenant's data settings.
- What the row becomes
- The row is struck from the list once the move is complete and receipted. Until then it stays here as a worklist — outside the list in Appendix 2, which does not count the use of Microsoft for WeOffice's own purposes as a sub-processor.
- Blocker
- B-28