Legal / Sub-processors
Sub-processors
Last Updated: 25 September 2026
A sub-processor is a third party that processes personal data on behalf of a data processor. As part of delivering Clientflow, we engage sub-processors within the categories below. For each category we state the purpose, processing location, and legal basis for any transfers to third countries (GDPR Article 28(2)-(4)).
The full list
Customers and prospective customers can receive the complete list of named sub-processors. Email us and we'll send it.
support@clientflow.nu| Category | Purpose | Location / transfer mechanism | Activation |
|---|---|---|---|
| Infrastructure | Database, backend and frontend hosting, CDN and product analytics | EU (Frankfurt) + USA — SCCs + DPF | Standard |
| Communications | Transactional emails, outbound SMS and push notifications | Denmark, EU + USA — SCCs + DPF | Standard |
| Telephony | Call transport — call recordings are stored by us, not by the carrier | Outside the EU/EEA — SCCs | On activation |
| AI | Speech-to-text, text generation and semantic search | USA — SCCs | Standard (can be turned off) |
| Payment | Payment processing — subscription and card payments from your own customers | EU (Ireland) + USA — SCCs + DPF | Standard |
| Bookkeeping | Invoicing and bookkeeping via accounting integrations | Denmark | On activation |
| Maps | Geocoding, map display and address data | Denmark, EU, UK + USA — SCCs + DPF / adequacy decision | Standard |
| Operations | Error monitoring and session recording (may include customer data shown on screen), plus bot protection at signup | USA — SCCs + DPF | Standard |
| Marketing | Lead integration | EU (Ireland) + USA — SCCs + DPF | On activation |
AI features are enabled by default and can be turned off at any time by the Data Controller under Settings → Company. When AI is turned off, disclosure to sub-processors in the AI category ceases. Derived data already stored (including embeddings) is not deleted automatically on opt-out — contact support@clientflow.nu if you want it erased.
Material changes to our sub-processors — including the addition of new sub-processors or the replacement of existing sub-processors that results in a changed processing location or transfer mechanism — will be notified with at least 30 days' prior notice through the platform and by email to the address associated with your account. During the 30-day notice period, you may object by written notice to support@clientflow.nu.
Last updated: 25 September 2026. Changes are notified with 30 days' prior notice through the platform and by email.