Sub-processors
Linkbase AB | Last Updated: 2026-07-12
1. About this list
Linkbase AB ("Linkbase") engages the third-party service providers below ("Sub-processors") to support the Linkbase application and services (the "Service"). This page is the maintained Sub-processor list referenced in Section 7 of the Linkbase Data Processing Agreement ("DPA").
For transparency, the list also includes providers that process account and billing data for which Linkbase is the data controller (this is noted in the data-categories column). That processing is governed by the Privacy Policy rather than the DPA.
2. Current Sub-processors
| Entity | Purpose | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting and infrastructure for the entire Service: compute, databases, storage, content delivery, transactional email delivery, and routing of AI requests (Cloudflare AI Gateway) | All Service data, including the business records processed under the DPA | United States (headquarters); global edge network with data centers in the EU | EU Standard Contractual Clauses; certified under the EU–U.S. Data Privacy Framework |
| Stripe Payments Europe, Limited and Stripe, LLC | Subscription billing and payment processing for Linkbase's invoicing of its Customers | Customer account and billing data (company details, contact details, payment information). Does not process the business records covered by the DPA — this processing is governed by the Privacy Policy | Ireland (contracting entity); United States | EU Standard Contractual Clauses; Stripe, LLC is certified under the EU–U.S. Data Privacy Framework |
| Functional Software, Inc. (Sentry) | Error tracking and application monitoring | Technical error and diagnostic data (error reports, request metadata), which may incidentally contain fragments of Personal Data | United States (entity); error data is stored in the EU (Sentry EU data residency, Germany) | EU data residency for stored error data; EU Standard Contractual Clauses; certified under the EU–U.S. Data Privacy Framework |
| OpenAI, L.L.C. | AI inference for product features, such as suggesting bookkeeping accounts. Requests are routed through Cloudflare AI Gateway | Excerpts of business records included in AI requests (for example transaction descriptions and account names). Not used by OpenAI for model training | United States | EU Standard Contractual Clauses |
| Anthropic, PBC | AI-assisted internal support and operations tooling, operating exclusively through Linkbase's audited administrative gateway | Personal Data accessed during support and operations work, on a role-based, least-privilege basis with all access recorded in an audit trail | United States | EU Standard Contractual Clauses |
3. Connected Platforms are not Sub-processors
The third-party platforms that you connect to the Service — such as e-commerce platforms, payment providers, advertising platforms, and accounting platforms — process your data under your own agreements with those providers. Linkbase accesses them on your instruction to provide the Service; they are not Linkbase Sub-processors and are therefore not listed on this page.
4. Changes and notifications
Linkbase updates this page and notifies Customers at least 30 days before a new or replacement Sub-processor begins processing Personal Data covered by the DPA. To receive change notifications by email, contact privacy@linkbase.se. Objection and termination rights are described in Section 7 of the DPA.
5. Contact
For questions about this list or data protection matters:
Linkbase AB
Email: privacy@linkbase.se
Website: https://linkbase.se
Last updated 2026-07-12