| What | Company | Data located | Safe guards and risk mitigation | Read more |
|---|---|---|---|---|
| Data storage and Hosting | AWS Frankfurt, Germany | EU, company located in US* | DPA, SCC, continous commitment by supplier to offer secure and compliant services | https://aws.amazon.com/compliance/gdpr-center |
| SMS sendouts | Twilio (US) | US/EU* | DPA, SCC, continous commitment by supplier to offer secure and compliant services to European customers. | https://www.twilio.com/gdpr |
| Payment provider (only when using credit card payments) | Stripe (US) | US/EU* | DPA, SCC, continous commitment by supplier to offer secure and compliant services to European customers. | https://stripe.com/guides/general-data-protection-regulation |
| Customer Support (only when opening support tickets) | Intercom (US) | US* | DPA, SCC, continous commitment by supplier to offer secure and compliant services to European customers. | https://www.intercom.com/security |
| Invoicing of Memlin products to Memlin customers | Fortnox | Sweden | DPA |
*Data process is done according to the EU-U.S Privacy Shield framework with SCC.