Solvi Consult/Data & Sub-processors

List of Sub-processors

Pursuant to GDPR Article 28(2) and our Data Processing Agreements, Solvi ApS maintains and makes available this up-to-date list of third parties (sub-processors) that process personal data on our behalf.

ControllerSolvi ApS (t/a Solvi Consult) · CVR 46410661
Document version1.1
Data protection contactAthena Lyhne Kjellerup · athena@solviconsult.com
Personal data processed includes: employee data (name, email, job title, contract details) and customer / contact persons at client organisations (name, email, company affiliation, communication history).
Microsoft Corporation
Microsoft 365 — Exchange, Teams, SharePoint, OneDrive, Word, Excel
EU Data Boundary
PurposeEmail, communication, document storage, video conferencing, collaboration platform
HQ / Legal entityUSA — One Microsoft Way, Redmond, WA 98052-6399
Data locationEU (EU Data Boundary programme). Metadata may temporarily be processed in the US.
Transfer basisEU SCC (GDPR Art. 46) + EU Data Boundary commitment
DPA / CertificationsMicrosoft DPA (Online Services Terms) · ISO 27001 · SOC 2 Type II
Configured under the EU Data Boundary programme for EU/EFTA customers. Certain diagnostic data and metadata may temporarily be processed outside the EU under SCCs.
Anthropic PBC
Claude.ai — AI-assisted text processing and document drafting
US-based
PurposeAI-assisted text processing, analysis, document drafting and internal knowledge search
HQ / Legal entityUSA — 548 Market St, PMB 90375, San Francisco, CA 94104
Data locationUSA (AWS). No EU data residency guarantee via direct API. Prompt data typically deleted after 30 days.
Transfer basisEU SCC (GDPR Art. 46). Anthropic DPA incorporated in Commercial Terms of Service.
DPA / CertificationsAnthropic DPA (Jan. 2026) · ISO 27001:2022 · ISO 42001 · SOC 2 Type I & II
Data is primarily processed in the US. For guaranteed EU data residency, AWS Bedrock EU inference profiles or Google Vertex AI EU regional endpoints should be considered. Prompts containing personal data should be minimised.
Slack Technologies Limited
Slack — Internal team communication and file sharing
US-based
PurposeInternal team communication, messaging, file sharing and collaboration
HQ / Legal entityIreland — Salesforce Tower, North Dock, Dublin D01 W2Y3 (Salesforce group, parent USA)
Data locationUSA (AWS). EU data residency available on Enterprise Grid plan only.
Transfer basisEU SCC (GDPR Art. 46). Slack Technologies Limited is the EU data processor entity.
DPA / CertificationsSlack DPA · ISO 27001:2022 · ISO 27017 · ISO 27018 · ISO 27701 · SOC 2 Type II
EU data residency is only available on Enterprise Grid. On standard/Pro plans, message and file data is stored in the US.
Zenegy Danmark ApS
Zenegy — Payroll, HR and salary processing
EU/EEA
PurposePayroll, HR administration, salary processing and employee data management. Includes CPR numbers, salary, pension.
HQ / Legal entityDenmark — Slotsmarken 16, 2970 Hørsholm (CVR: 38366041)
Data locationEU/EEA. Production in Azure West Europe (Amsterdam). Test in Azure North Europe (Dublin).
Transfer basisNo third-country transfer (processor established in EU).
DPA / CertificationsZenegy DPA (GDPR Art. 28) · ISAE 3402 Type II (PwC, annual audit)
e-conomic danmark A/S
e-conomic — Cloud accounting and invoicing
EU/EEA
PurposeAccounting, invoicing, financial reporting and bookkeeping
HQ / Legal entityDenmark — Dampfærgevej 26, 2100 Copenhagen Ø (CVR: 20699210) (Visma group, parent Norway)
Data locationEU/EEA. Data hosted in Microsoft Azure EU regions.
Transfer basisNo third-country transfer (processor established in EU).
DPA / Certificationse-conomic DPA (GDPR Art. 28) · ISO 27001 · SOC 2 Type II
HubSpot Ireland Limited
HubSpot — CRM, sales and marketing
EU/EEA
PurposeCustomer relationship management, contact and pipeline management, email communication and marketing
HQ / Legal entityIreland — HubSpot House, One Sir John Rogerson's Quay, Dublin 2 (HubSpot group, parent HubSpot, Inc., USA)
Data locationEU data centre (AWS Frankfurt, Germany). Certain support and feature-specific sub-processors may process data in the US.
Transfer basisEU SCC (GDPR Art. 46) for any onward transfers to HubSpot, Inc. and US-based sub-processors.
DPA / CertificationsHubSpot DPA (GDPR Art. 28) · ISO 27001 · SOC 2 Type II
Personal data of customer and prospect contact persons is stored in HubSpot. HubSpot maintains its own list of sub-processors at legal.hubspot.com/sub-processors-page.
Google Cloud EMEA Limited
Google Workspace — Email, calendar, Drive and collaboration
Global
PurposeEmail, calendar, document storage, file sharing and collaboration
HQ / Legal entityIreland — Velasco, Clanwilliam Place, Dublin 2 (Google group, parent Google LLC, USA)
Data locationGlobal Google data centres. EU data region can be configured on eligible Workspace editions.
Transfer basisEU SCC (GDPR Art. 46) + EU-U.S. Data Privacy Framework (Google LLC certified).
DPA / CertificationsGoogle Cloud Data Processing Addendum (CDPA) · ISO 27001 · ISO 27017 · ISO 27018 · SOC 2 Type II
Unless a data region policy is applied, data at rest may be stored in any Google data centre worldwide.
Categories of personal data

Data processed by sub-processors

Employee data

  • Name and email address
  • Job title and contractual details
  • CPR number
  • Salary and pension details
  • Bank details

Customer data (contact persons)

  • Name and email address
  • Phone number
  • Company affiliation
  • Communication history

Questions about this list?

Contact our data protection responsible for more information or to request documentation.