Sub-processors
Last updated: 2026-10-20
This is an English translation of the Swedish original. If the versions differ, the Swedish version prevails.
Version: 1.0 Publisher: JOBBS AB, Reg. No. 559378-9083
This page lists the sub-processors that JOBBS AB engages to process personal data on behalf of customers in the JOBBS platform, the JOBBS app and the web app pay.jobbs.se. The list is Appendix 3 to the JOBBS Data Processing Agreement.
Intended changes are notified to customers at least 30 days before they take effect, in accordance with section 8 of the Data Processing Agreement.
1. Sub-processors that are always used
| Supplier | Service and purpose | Personal data | Location | Transfer basis |
|---|---|---|---|---|
| Microsoft Ireland Operations Limited (Microsoft Azure), One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland | Cloud hosting, database, storage, backup, logging and monitoring (Application Insights) | All categories processed in the platform | EU/EEA (North Europe, Ireland) | Not applicable, processing within the EU/EEA. For any support or remote access from a third country: Microsoft’s EU Data Boundary, the EU-US Data Privacy Framework and standard contractual clauses (SCCs) (2021) under Microsoft’s Products and Services DPA |
| Twilio Ireland Limited, Reg. No. 557454, 70 Sir John Rogerson’s Quay, Dublin 2, D02 R296, Ireland (Twilio SMS) | Sending one-time codes, invitations and notifications by SMS | Mobile number, first name, one-time code or access link in the message text | USA | EU-US Data Privacy Framework (Twilio Inc.), Twilio’s binding corporate rules (BCRs) and SCCs (2021) under Twilio’s data processing agreement |
| Twilio Ireland Limited (Twilio Voice), address as above | Door intercom and calls | Phone number, time and duration of calls, any voice content in the call | USA | As above |
| Twilio Ireland Limited (Twilio SendGrid), address as above | Sending receipts, invitations and confirmations by email | Name, email address, purchase details, access link in the message text | USA | EU-US Data Privacy Framework (Twilio Inc.) and SCCs (2021). Twilio’s BCRs do not cover SendGrid. |
| Skandinaviska Enskilda Banken AB (publ), Reg. No. 502032-9081, Kungsträdgårdsgatan 8, 106 40 Stockholm | Electronic identification and age verification with BankID at login, purchase and entry | Personal identity number, name, identification result | Sweden | Not applicable, processing within the EU/EEA. Calls go directly to BankID without an intermediary. |
| jsreport s.r.o., Jičínská 226/17, Prague, Czech Republic | Rendering of receipts and reports (jsreport online) | Receipts, VAT reports, settlements, customer logs and signs converted to PDF | EU/EEA (Czech Republic), with cloud hosting at Amazon Web Services and MongoDB | Within the EU/EEA. The subcontractors are certified under the EU-US Data Privacy Framework. |
| Scandit AG, Hardturmstrasse 181, 8005 Zürich, Switzerland | Software library for barcode scanning in the JOBBS app | Usage data for licence checks sent by the software: IP address, installation ID, licence key, device model and operating system | Switzerland | The Commission’s adequacy decision for Switzerland |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (on behalf of Google LLC) | Fonts in the administration interface (Google Fonts) and location services on Android phones | IP address when the admin interface loads fonts. The location service runs on the phone. JOBBS sends no data to Google from its servers. | USA | EU-US Data Privacy Framework and SCCs (2021) |
| Volentio JSD Limited (jsDelivr), England and Wales | Delivery of the scanner in the web app pay.jobbs.se via Cloudflare, Fastly and Gcore | The visitor’s IP address | United Kingdom and globally | The Commission’s adequacy decision for the United Kingdom, and the providers’ SCCs |
| Raspberry Pi Ltd, Maurice Wilkes Building, St Johns Innovation Park, Cowley Road, Cambridge CB4 0DS, United Kingdom | Raspberry Pi Connect, remote maintenance of control boxes for doors and checkouts | Registration of control boxes: device ID and IP address. No personal data about end customers. | United Kingdom | The Commission’s adequacy decision for the United Kingdom |
2. Sub-processors used only when the Customer activates a module
These sub-processors process the Customer’s personal data only if the Customer has activated the module or lock stated.
| Supplier | Module | Service and purpose | Personal data | Location | Transfer basis |
|---|---|---|---|---|---|
| Seam Labs, Inc., 2948 20th St, #302, San Francisco, CA 94110, USA | Yale, August and other smart locks via Seam | Lock control and retrieval of lock events | Device ID and unlocks | USA | EU-US Data Privacy Framework |
| Motorola Solutions, Inc. (Openpath / Avigilon Alta), USA | Openpath locks | Access control and lock events | User ID, name, email address, permissions, time and door at entry | USA | Motorola Solutions’ BCRs and SCCs (2021) |
| Telcred AB, Reg. No. 556782-4981, Stockholm | Telcred access control | Access control and lock events | User ID, permissions, time and door at entry | Sweden | Not applicable, processing within the EU/EEA |
| Anthropic Ireland, Limited (on behalf of Anthropic PBC, USA) | JOBBS AI | AI assistant in the administration interface that answers questions and compiles material | The content that the Customer’s users send to the assistant, which may include data about end customers, sales and staff | USA | SCCs (2021), Modules 2 and 3, under Anthropic’s data processing agreement. Anthropic may not train its models on the data and deletes it within 30 days. |
3. Integrations activated by the Customer
The following systems are not sub-processors of JOBBS. The Customer has its own agreement with the supplier. When the Customer activates the integration, JOBBS transfers data to the system in accordance with the Customer’s instruction (section 8.7 of the Data Processing Agreement). The Customer is responsible for having its own data processing agreement with the supplier where required.
| System | What the integration does | Data that may be transferred |
|---|---|---|
| Specter | Business system for wholesalers and builders’ merchants | Items, stock levels, customer numbers and orders, for example the business customer’s name and project reference |
| Adyen N.V. | Card payments. Payments go directly to the Customer’s own Adyen account under the Customer’s agreement with Adyen. | Payment and transaction data, amounts, masked card details |
| SkiStar | Bookings and cards | Bookings and card data for the merchants that have the integration |
| Visma Retail SmartStore | Store data and business system | Sales and receipts, possibly customer numbers |
| Pricer | Electronic shelf labels | Items and prices. Normally no personal data |
4. Change history
| Version | Date | Change |
|---|---|---|
| 1.0 | 2026-10-19 | First published version |
5. Contact
Questions about the list: support@jobbs.se