Subprocessors

INSTROC engages the third-party subprocessors listed below to help deliver our Service. Each subprocessor is contractually bound to process personal data only on our instructions and to maintain appropriate technical and organizational security measures, in line with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection law.

This list supplements Section 6 of our Privacy Policy.

Current Subprocessors

International Data Transfers

Where subprocessors are located outside the European Economic Area, transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent safeguards such as an adequacy decision. You can request a copy of the relevant transfer mechanisms by emailing privacy@instroc.com.

Notice of Changes

We update this list whenever a subprocessor is added, removed, or materially changed. For material additions, we will post the updated list here at least 30 days before the new subprocessor begins processing personal data, giving you the opportunity to review and, if needed, object by contacting us at privacy@instroc.com. If you would like to be notified of updates by email, you can subscribe by sending a request to the same address.

Third-Party Integrations

Some optional features rely on third-party services that you connect to directly — for example, custom-domain purchase flows or source-control integrations. In those cases, the third-party service acts as an independent controller for the information you provide to it, and its own privacy policy governs that processing. These services are not subprocessors of INSTROC and are not listed above.