Subprocessors

Provider

Ankrito Oy, a limited company (osakeyhtiö), formerly Selvia

Business ID

3658630-6

Domicile

Helsinki, Finland

Address

Konalantie 7, 00370 Helsinki, Finland

Email

support@ankrito.com

This list is maintained by Ankrito.

Supabase (Accounting database)

Database hosting, file storage and authentication for Ankrito's accounting service. Processes the accounting, invoicing, VAT and document data the service stores. Hosted in the EU (Ireland). Supabase's own data processing terms and Standard Contractual Clauses apply to any onward transfer.

Supabase (POS database)

Database hosting and authentication for Ankrito's point-of-sale service. Processes sales, staff-access and venue data for that product. Hosted in the EU (Sweden). Supabase's own data processing terms and Standard Contractual Clauses apply to any onward transfer.

Vercel

Hosts the website and web application and serves them to visitors. Processes request and technical data needed to serve those pages. Vercel's own data processing terms and Standard Contractual Clauses apply; the specific hosting region per request is not independently confirmed here.

Google Cloud — Document AI

Extracts text and line items from uploaded receipts, invoices and bank statements so the service doesn't require manual data entry. Processes the content of the documents a customer uploads. Google's Cloud data processing terms and Standard Contractual Clauses apply; the specific processing region is configurable and not independently confirmed here.

Google Cloud — backup storage

Keeps Ankrito's own encrypted backup copies of the accounting database. The copy is made by a scheduled job in Google Cloud and stored in Finland (europe-north1), in a Google Cloud project separate from the live service. Processes the database content the backups contain. Google's Cloud data processing terms apply.

Temporal Technologies (Temporal Cloud)

Runs background steps of the service reliably, such as the steps of an account deletion, so they finish even after a restart. Receives only internal record identifiers — never names, email addresses, documents or accounting figures. Hosted on Amazon Web Services in Frankfurt, Germany (EU). Temporal's own data processing terms apply.

Google Firebase

Push notifications, and the primary crash-diagnostic backend for the mobile app on a phone or tablet (Crashlytics). Processes device and crash-diagnostic data, and a notification token. Google's standard Firebase/Cloud data processing terms and Standard Contractual Clauses apply.

Sentry

A fallback crash-diagnostic backend, used only on a session where Firebase itself fails to start — and the backend used for a browser-based build of the app, where Firebase Crashlytics is not used. Never active at the same time as Firebase Crashlytics in the same session. Processes technical error data and, where it is present in the surrounding code context, incidental diagnostic data. Sentry's own Data Processing Addendum applies (EU–US Data Privacy Framework and Standard Contractual Clauses); the specific processing region is not independently confirmed here.

Resend

Sends transactional email on Ankrito's behalf — invoices, notifications and account-related messages. Processes the recipient's email address and the message content. Resend's own data processing terms and Standard Contractual Clauses apply.

Google Workspace (Gmail and Drive)

Ankrito's paid business email and file-storage environment — not the owner's personal Google account. Hosts Ankrito's email, including support@ankrito.com, so it processes every email a customer sends to or receives from Ankrito. Also used to receive payroll information submitted through Ankrito's payroll data-collection form and to store a backup copy, and to store immigration-engagement documents a customer provides. Google's Workspace data processing terms (the Cloud Data Processing Addendum) and Standard Contractual Clauses apply; a specific Workspace data region or additional regional control is not independently confirmed here.

• WhatsApp / Meta — a customer-chosen channel for contacting Ankrito. Ankrito has no server-side WhatsApp Business API integration, so Ankrito's systems don't automatically receive WhatsApp message metadata and WhatsApp doesn't process service data on Ankrito's behalf. A message a customer sends is subject to WhatsApp's own terms as a messaging app, the same as any other call or message to Ankrito.
• Apple App Store / Google Play — distribute the app and, where used, process in-app subscription payment under their own platform terms. They don't process Ankrito's service data on Ankrito's behalf.

Ankrito updates this list when it adds, removes or replaces a subprocessor. For a new subprocessor that will process personal data under the Data Processing Agreement, Ankrito also emails notice where it holds a current contact email for the affected customer, as described in that agreement's subprocessor clause.

Questions about a subprocessor on this list: support@ankrito.com.