Subprocessors
Version 1, in force from 2026-10-03
These vendors process personal data on Diffa’s behalf. Changes are announced by e-mail 30 days in advance, as the data processing agreement says.
| Vendor | Function | Location | Transfer basis |
|---|---|---|---|
| Google Cloud EMEA Ltd | Hosting: database, document storage, encryption, logs | Sweden (Stockholm) | Within the EU |
| Google Ireland Ltd (Firebase) | Sign-in with Google, Microsoft or password | EU and USA. Account data may be stored outside the EU | EU standard contractual clauses |
| Resend Inc. | Transactional e-mail | Ireland | Within the EU. Standard contractual clauses for US support access |
| Stripe Payments Europe Ltd | Billing and card payment of Diffa fees | Ireland | Within the EU |
| OpenAI LLC | Ask Diffa: answers to account questions, only if you use it. Never names, registration numbers or amounts | USA | EU standard contractual clauses |
| Cloudflare Inc. | The diffa.se website and its cookie-free analytics | Global network, with EU edge for EU visitors | EU standard contractual clauses |
Questions about the list go to support@diffa.se.
The processor is Sliti & Klay Group AB, reg. no. 559524-2891, Remigatan 41, SE-261 45 Landskrona, Sweden.