Sub-processors
Last updated: 16 July 2026
Mynto uses the providers below to deliver the service. This list forms part of section 5 of the data processing agreement. We notify customers at least 30 days before a sub-processor is added or replaced, and the customer may object within that period.
Infrastructure
Runs the service itself. All data passes through these.
| Provider | Purpose | Location |
|---|---|---|
| Encore Cloud (Encore Inc.) | Application hosting | EU West |
| Neon (Neon Inc.) | Database — all accounting and personal data | AWS eu-central-1, Frankfurt |
| Vercel (Vercel Inc.) | Web application hosting | Stockholm (arn1) |
| Fly.io | Search indexing for the knowledge base | Stockholm |
Application services
| Provider | Purpose | Location |
|---|---|---|
| Anthropic PBC | AI assistant, reading receipts and invoices, categorisation | USA — SCCs |
| Resend (Resend Inc.) | Outgoing and inbound email | USA — SCCs |
| Google Ireland Ltd | Importing documents from the customer's Gmail (only if connected) | EU/USA — SCCs |
| Microsoft Ireland | Importing documents from the customer's Outlook (only if connected) | EU/USA — SCCs |
| Maventa Oy (Visma) | Sending and receiving EHF/PEPPOL invoices | Finland |
| PostHog Inc. | Product analytics (pseudonymous ids) | EU |
| Sentry (Functional Software Inc.) | Error monitoring | EU |
| Apple Inc. / Google LLC | Push notifications to app and browser | USA — SCCs |
Banking and payments
These are licensed financial institutions. They act as processors for the data we send them, but are independent controllers for customer due diligence (anti-money-laundering rules) and for executing payments.
| Provider | Purpose | Location |
|---|---|---|
| Stripe Payments Europe Ltd | Subscription billing and company cards | Ireland |
| Folio Bank AS | Bank transactions and payouts | Norway |
| Enable Banking Oy | Bank connectivity (PSD2) for other banks | Finland |
| Vipps MobilePay AS | Sign-in with BankID | Norway |
Not sub-processors
The Norwegian Tax Administration, Altinn/Digdir, ID-porten, Maskinporten and the Brønnøysund Register Centre receive data when the customer files or retrieves information from the authorities. They are independent controllers under law, not Mynto's processors, and are therefore outside the scope of section 5.
If the customer connects a webshop or payment provider (for example Shopify, Stripe, PayPal, Klarna, Zettle, SumUp, WooCommerce, Wix or Vipps), that happens at the customer's own initiative using the customer's own credentials. Mynto then reads data from a service the customer already uses.
Questions or objections: personvern@mynto.no