Suppliers and data processors
A list of the entities Efirma Regnskap AS entrusts with processing personal data, together with information on transfers outside the European Economic Area (EEA).
Last updated: 21.07.2026
Efirma Regnskap AS (data controller, org. no. 916 732 414, Lundegeilen 16, 4323 Sandnes, Norway) uses external suppliers that process personal data on its behalf. Below is the full chain of processors together with the purpose of processing, the processing location and the basis for any transfer outside the EEA.
Efremtid AS
org. no. 918 320 741, Lundegeilen 16, 4323 Sandnes, Norway
- Role
- Data processor
- Processing location
- Norway
- Purpose
- Software provider: accounting software, EHF access point (e-invoicing) and invoicing software
- Transfer basis
- Processing within the EEA
Efirma sp. z o.o.
Ramiszów 153A, 51-217 Wrocław, Poland · KRS 0001043497
- Role
- Data processor
- Processing location
- Poland
- Purpose
- Subcontracted services: IT, customer service and support
- Transfer basis
- Processing within the EEA
Amazon Web Services (AWS)
Amazon Web Services EMEA SARL, Luxembourg (EEA); Amazon group with an entity in the USA
- Role
- Data processor
- Processing location
- EEA regions only
- Purpose
- Hosting of infrastructure, database and application computing power
- Transfer basis
- Data stored exclusively within the EEA; EU–US Data Privacy Framework + standard contractual clauses (SCC)
Hetzner
Hetzner Online GmbH, Germany
- Role
- Data processor
- Processing location
- Germany and Finland
- Purpose
- Development, test and audit servers
- Transfer basis
- Processing within the EEA
Google Ireland Limited / Google Cloud EMEA Limited (Ireland)
- Role
- Sub-processor (via Efirma sp. z o.o.)
- Processing location
- EU region possible; Google LLC entity in the USA
- Purpose
- Email and file storage (Workspace) and document analysis (AI)
- Transfer basis
- EU–US Data Privacy Framework + standard contractual clauses (SCC)
Anthropic (Claude)
Anthropic Ireland Limited / Anthropic PBC, USA
- Role
- Sub-processor (via Efirma sp. z o.o.)
- Processing location
- USA
- Purpose
- AI model for document recognition and analysis; no training on our data
- Transfer basis
- Standard contractual clauses (SCC); no DPF certification
OpenAI
OpenAI Ireland Limited / OpenAI OpCo LLC, USA
- Role
- Sub-processor (via Efirma sp. z o.o.)
- Processing location
- USA (model inference in the USA only)
- Purpose
- AI model for document recognition and analysis; no training on our data
- Transfer basis
- Standard contractual clauses (SCC); no DPF certification
Vast.ai
Vast.ai, Inc., USA
- Role
- Sub-processor (via Efirma sp. z o.o.)
- Processing location
- Data centres within the EEA only (Europe)
- Purpose
- GPU computing power for AI models; personal data from documents is transferred only to servers within the EEA
- Transfer basis
- Data processed exclusively within the EEA; standard contractual clauses (SCC)
EmailLabs
Vercom S.A., Poznań, Poland
- Role
- Data processor
- Processing location
- Poland
- Purpose
- Sending emails (transactional)
- Transfer basis
- Processing within the EEA
Brevo
Sendinblue SAS (Brevo), Paris, France
- Role
- Data processor
- Processing location
- France / Germany / Belgium (EU)
- Purpose
- Sending emails
- Transfer basis
- Processing within the EEA
CloudTalk
CloudTalk s.r.o., Slovakia
- Role
- Data processor
- Processing location
- Account and telephony: EU; supporting infrastructure also in the USA, Singapore, Australia and Brazil
- Purpose
- Cloud telephony (VoIP); calls may contain personal data. Recordings are stored locally, without AI analysis
- Transfer basis
- EU–US Data Privacy Framework / SCC for transfers outside the EEA
Blink
Blink (Super Smashing Ltd), United Kingdom
- Role
- Data processor
- Processing location
- United Kingdom; further processing including in the USA
- Purpose
- Communication portal for the team; messages may contain personal data
- Transfer basis
- Adequacy decision (United Kingdom, GDPR art. 45) + SCC for onward transfers
ZTL
ZTL Payment Solution AS, Norway (org. no. 920 970 931)
- Role
- Data processor
- Processing location
- Norway
- Purpose
- Execution of payments and transfers; settlement data may contain personal data
- Transfer basis
- Processing within the EEA
Intrum
Intrum AS, Norway (org. no. 835 302 202)
- Role
- Data recipient
- Processing location
- Norway
- Purpose
- Debt collection
- Transfer basis
- Processing within the EEA
Svea
Svea Finans AS, Norway (org. no. 980 121 798)
- Role
- Data recipient
- Processing location
- Norway
- Purpose
- Handling of receivables and debt collection
- Transfer basis
- Processing within the EEA
Transfers outside the EEA
Some suppliers process data outside the European Economic Area, primarily in the USA. In such cases we apply the safeguards required by Chapter V of the GDPR — the European Commission's adequacy decision (including the EU–US Data Privacy Framework) and standard contractual clauses (SCC).
Contact
For questions regarding the processing of personal data and the supplier chain, please contact us:
EFIRMA REGNSKAP AS
Org.nr: 916 732 414
Lundegeilen 16
4323 Sandnes, Norge
E-post: info@efirmaregnskap.no
Supervisory authority: Datatilsynet (Norway)