Sub-processors
PrivyLedger deliberately runs with a minimal processor footprint. This page lists every third party that processes personal data on our behalf. We publish changes here in advance so you can exercise your objection right under section 4 of the Data Processing Agreement.
Vassbrekke AS (self)
- Purpose:
- Application hosting, database, backups — the PrivyLedger service itself
- Location:
- Norway (EEA)
- Transfer basis:
- None — EEA/EEA
- Note:
- Infrastructure operated by the Processor under Norwegian jurisdiction.
Stripe Payments Europe / Stripe Inc.
- Purpose:
- Payment processing and billing identifiers (customer & subscription IDs only)
- Location:
- Processing entity in the EU; Stripe Inc. (US) as parent
- Transfer basis:
- EU-US Data Privacy Framework certified; SCCs where applicable
- Note:
- PrivyLedger stores no card data — only opaque billing IDs. Card handling occurs on Stripe's own infrastructure.
Change log
New sub-processors are published here at least 30 days before going live. Objections: contact per the DPA.
- • 2026-08-23 — Initial publication (Stripe listed since service launch).
Register data you store in PrivyLedger is not sent to any of these parties for processing — they serve the operation of the service itself (hosting, payments). See also our Trust page for jurisdiction details.