Subprocessors
The companies Arctiv AB uses to run Propiler, what they do and where they are.
Current subprocessors
Amazon Web Services EMEA SARL
- Purpose
- Hosting of the Propiler service: database, file storage, sign-in (Amazon Cognito), sign-in and verification emails (Amazon SES), logs.
- Personal data
- All service data: accounts, workspaces, equipment, packlists, activity, photos, logs.
- Location
- EU — Stockholm, Sweden (eu-north-1)
- Transfer safeguard
- Data stays in the EU.
Vercel Inc.
- Purpose
- Hosting of the web app (my.propiler.app), the admin console and the documentation site.
- Personal data
- Web requests (IP address, browser details) and, for the cut-out image helper, photo bytes in transit.
- Location
- Web functions in Stockholm, Sweden (arn1); content delivered from Vercel's edge network
- Transfer safeguard
- Vercel Inc. is a US company: EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
Anthropic PBC
- Purpose
- AI analysis of equipment photos, when AI photo analysis is used and allowed by the organization.
- Personal data
- The equipment photo being analysed and the request text. No account details are sent.
- Location
- USA
- Transfer safeguard
- EU Standard Contractual Clauses.
Resend, Inc.
- Purpose
- Transactional email, such as invitations to a workspace or an organization.
- Personal data
- Recipient email address, the name of the person inviting, the email content.
- Location
- USA
- Transfer safeguard
- EU Standard Contractual Clauses.
Apple Inc.
- Purpose
- Push notifications to the iOS app (Apple Push Notification service).
- Personal data
- Device push token and the notification text.
- Location
- USA
- Transfer safeguard
- EU–US Data Privacy Framework and EU Standard Contractual Clauses.
Google LLC
- Purpose
- Maps in the iOS app and the web portal (Google Maps), and the place search when someone gives a storage place an address (Places API).
- Personal data
- The map area being viewed, the device's or browser's IP address, and the text typed into the place search. Activity pins are drawn on the device.
- Location
- USA
- Transfer safeguard
- EU–US Data Privacy Framework and EU Standard Contractual Clauses.
OpenStreetMap Foundation
- Purpose
- Map tiles for the web map only when Google Maps is unavailable (fallback).
- Personal data
- The map area being viewed and your browser's IP address (your browser fetches the tiles directly).
- Location
- United Kingdom
- Transfer safeguard
- EU adequacy decision for the United Kingdom.
Brave Software, Inc.
- Purpose
- Image search when you look for a product photo by name.
- Personal data
- The search text only (for example a product name). No personal data is sent.
- Location
- USA
- Transfer safeguard
- No personal data is transferred.
Recipients you choose
- Google — if you sign in with “Continue with Google”, Google handles that sign-in under its own terms.
- Your browser’s push service (for example from Google, Mozilla, Apple or Microsoft) — if you turn on notifications in the web app. The message content is end-to-end encrypted.
- AI assistants and API clients you connect — they receive the data you or your organization allow them to read.
Not in use
Stripe (card payments) is only used if card payment is switched on for your organization. Today Propiler is billed by invoice.
Changes
We update this page before we add or replace a subprocessor, and we tell customers who have a data processing agreement in advance, so they can object. Questions: support@crdbag.com.