Suppliers that can see dataLast changed 7 October 2026
Sub-processors
We run nothing in a server room of our own. Here is every supplier that can see data in Plauso, what they do for us, what they can see and where they are. The list is the whole list.
DraftThis text has not been reviewed by a lawyer.
We wrote it ourselves, as plainly as we could, and it describes how Plauso works today. But no lawyer has read it, and we are not going to pretend otherwise. If you see something that does not match how the service actually works, we want to know: write to support@plauso.app.
Why the list exists
For your own customers' details you are the controller and we are your processor. If we in turn engage someone who processes that data, they are called a sub-processor, and you have the right to know who they are before you hand anything over.
The list is also our own brake. A supplier not on it is not switched on, and one that is to be switched on lands here first.
- Company
- Nordkod Media AB
- Company registration number
- 559591-6759
- VAT number
- SE559591675901
- Address
- Bultgatan 38, 442 40 Kungälv, Sweden
- Service
- plauso.app
- Contact
- support@plauso.app
The suppliers
| Supplier | What they do for us | What they can see | Status |
|---|---|---|---|
| Vercel | Runs the site, the app and the storage where the account sits, and runs the scheduled sending. | Everything stored in the service: the account, the customers you added, the bookings and the orders. | In use today. |
| Resend | Sends the email: sign-in codes, the request to your customers, booking messages, the monthly report and the reminder to book again. | The recipient's address, the first name and the text of the email. | In use today. |
| 46elks | Sends text messages: the request, the reminder and booking messages. Swedish company, traffic stays inside the EU. | The recipient's mobile number, the sender name and the text. | In use when text messages are switched on. |
| Twilio | An alternative route for text messages, an American company. | The same as the row above. | Standby. Which route is used is set inside the service. |
| Google Places: finds your business profile when you choose it or competitors to compare with, and gives the centre point of the map ranking in Pro. If you connect your Business Profile, we read reviews and the profile there and publish what you approved. | The search text you type and the places' place_id. Of the answer we store only place_id. With a connected Business Profile also the replies, changes and posts you approved. Never your customer list. | In use today. The Business Profile only once you have connected it. | |
| Idura | The BankID sign-in. | Your personal identity number, at their end. Only a hash of it reaches us. | In use when you sign in with BankID. |
| Stripe | Card payment for plans, text top-ups and orders for signs and print. | The amount, your business name and email, and your card details, which never pass through us. | In use when you pay by card. A trial needs no card, and orders for signs and print can also be paid by invoice. |
| Anthropic | The language model that drafts suggestions: texts for your Google profile, the draft of your website, reply suggestions for reviews you paste in and for Google reviews in a connected Business Profile, and the check of whether AI search mentions your business. | What you typed or pasted in yourself (including a review you want to reply to, which may contain the reviewer's name, and the signature you want to end with), your business name and your town. With a connected Business Profile also the Google review's text, rating and the reviewer's display name. Never your customer list. A review you paste in is not stored with us, and suggestions for Google reviews are stored encrypted for at most 30 days. | In use when you press the button for a suggestion, a reply or a check. With a connected Business Profile also by itself for every new review from Start, and for auto-replies if you switched them on. |
| DataForSEO | The rating and number of reviews on Google (yours and the competitors you chose, details that are already public) and the map ranking in Pro. | The places' place_id, your business name, the search phrase and the map points' coordinates. Never your customers. | In use when ratings are shown, when you run the map ranking and every morning for needs-based routing. A rating is reused for at most 12 hours. |
| Push services | Deliver the notifications from the Plauso app to your phone or computer. Which service is used is decided by your browser: Google, Apple, Mozilla or Microsoft. | An encrypted notification only your device can read, and the address of your device with them. Never a customer's number or address. | In use when you have turned notifications on. |
| PostNord and DHL | Deliver the parcel or letter with what you ordered. | The name and address on the shipment. | In use when you order signs or print. |
What each of them sees
No supplier gets the whole picture. The one sending text messages sees a mobile number and a text, not your account. The one carrying the parcel sees an address, not your customers. The language model sees only what you typed or pasted in yourself, your business name and your town, and with a connected Business Profile the Google reviews it drafts replies to. DataForSEO sees the places' ids, your business name and search phrases, never one of your customers. The push services see an encrypted notification they cannot read.
The suppliers process the data under their own data protection terms. What we promise you about them is in the data processing agreement in the terms of service. PostNord and DHL are themselves responsible for the details on the parcel while it travels, as every carrier is.
Where they sit
46elks is a Swedish company, Idura a Danish one, DataForSEO an Estonian one and PostNord a Swedish-Danish one. DHL is German. Vercel, Resend, Twilio, Stripe, Anthropic and Google are American companies, and the push services are run by Google, Apple, Mozilla and Microsoft, which are American too.
The service runs in Vercel's cloud without being tied to a region inside the EU, so expect data to be stored and processed in the United States. How the transfer is protected is in the privacy policy.
If the list changes
If we are to add or replace a supplier that sees your customers' details, we email the account owner before it is put to use, and the list here changes at the same time. If you object and we cannot find a solution, you can end the agreement before the change takes effect.
If you have questions about a particular supplier, write to support@plauso.app and we will tell you what they do and why.