Sub-processors
Effective date: 6 November 2026
These are the companies that process personal data for Flenno’s service and mailbox; our cookie policy names the website’s tools. The data processing agreement refers to this page.
Sub-processors for your organisation’s content
Amazon Web Services EMEA SARL (AWS)
Hosting, storage and the AI models for the Flenno service.
EU (storage in Sweden; AI models in AWS EU regions); the content delivery network and some security logs also outside the EU
None needed in the EU; outside it, an adequacy decision, including the EU-U.S. Data Privacy Framework, otherwise the standard contractual clauses in AWS’s data processing addendum
Opper Technology AB
AI model gateway for the Flenno AI agent, on EU routes only.
EU (Sweden)
None needed
AWS’s and Opper’s own sub-processors are on their published lists: AWS and Opper.
Other providers that process personal data for Flenno
Flenno is the controller of the data these providers hold, so they sit outside the data processing agreement.
WorkOS, Inc.
Sign-in and session management for the Flenno app.
United States
EU standard contractual clauses
Google LLC (Google Workspace)
Email for Flenno’s own mailbox.
United States and other countries
EU-U.S. Data Privacy Framework
The data sources your organisation connects are not sub-processors: Flenno reads data from them on your organisation’s behalf and sends them no content of your organisation.
Changes to this list
We announce a new or replaced sub-processor for your organisation’s content on this page, and email your organisation’s administrators, at least 14 days before it starts. You can object within that period. If we cannot resolve it, you can end the affected service, and we refund the fees you paid for the time after it ends.
Where the service runs, and taking your data with you
The Flenno service runs on AWS in the European Union, and its infrastructure is subject to EU law and the law of the Member States where it runs: Sweden for storage, and AWS’s EU regions for the AI models. We keep your content in the EU and encrypt it. We give a non-EU authority access to it only where EU or Member State law allows it, and our provider contracts require the same. You can take all your exportable data with you, in JSON and CSV, at no charge. Annex A of our Terms lists what you can take.