SUB-PROCESSORS
Markviss AS
Organization number: 917 324 689
Last Updated: 08.09.2026
This page lists the third parties that Markviss engages to process personal data on behalf of its customers. It forms Annex 3 to the Data Processing Agreement, and it is the list referred to in Section 10.5 of the Terms of Service and in Section 5 of the Privacy Policy.
Every sub-processor listed here is bound by a written contract imposing data protection obligations no less protective than those Markviss owes its customers, in accordance with GDPR Article 28(4).
1. How Changes Are Notified
Markviss notifies customers of any intended addition or replacement of a sub-processor before that sub-processor begins processing customer personal data. Customers may object on reasonable data protection grounds within fourteen (14) days of notification, as set out in Section 6 of the Data Processing Agreement.
To be added to the notification list, write to info@markviss.com. The Last Updated date above changes whenever this list changes.
2. Sub-Processors of Customer Data
These sub-processors may process personal data contained in data that customers enter, upload or import into the Markviss application (app.markviss.com).
| Sub-processor | Purpose | Personal data involved | Location of processing |
|---|---|---|---|
| Amazon Web Services | Hosting, database storage, backups, file storage, message queues and content delivery for the Markviss application. | All categories of customer personal data described in Annex 1 of the DPA. | Stored and processed in the AWS Europe (Stockholm) region, eu-north-1, within the EEA. Requests are delivered through Amazon CloudFront, which serves them from edge locations in Europe and North America; stored data does not leave eu-north-1. |
| Amazon Bedrock (Amazon Web Services) |
Generating replies in the AI assistant, and proposing column mappings when a user imports a file. | The prompt a user writes, the conversation history in that session, and the metric and business data the assistant retrieves in order to answer — which may contain personal data the customer has entered. | Amazon Bedrock in eu-north-1, using EU-only cross-region inference profiles, so inference stays within EU regions. Prompts and responses are not used to train or improve any model. |
| Stripe | Subscription billing and payment processing. | Billing contact name and email address, company name, billing address, subscription and invoice data. Card details are collected by Stripe directly and are never held by Markviss. | EEA and United States. Transfers outside the EEA take place under the EU Standard Contractual Clauses in Stripe’s data processing terms. |
| Customer.io | Sending transactional and account emails — invitations, trial and subscription notices, and service messages. | Name, email address, and subscription attributes such as plan, seat count and trial end date. | Customer.io’s EU region. Markviss is configured against track-eu.customer.io and api-eu.customer.io, so this data is held in the EU. |
Markviss engages no other sub-processors for customer personal data. In particular, Markviss uses no third-party error tracking, session recording or product analytics service inside the application.
3. Systems the Customer Connects
When a customer connects a source system — an accounting, ERP or CRM platform — Markviss reads data from that system on the customer’s instruction. Those providers are not sub-processors of Markviss: the customer’s relationship with them is its own, and data flows from them to Markviss rather than the other way round. Markviss does not write customer data into a connected system.
4. Website and Marketing
The following are used on the public website, markviss.com, where Markviss acts as a controller in its own right rather than on a customer’s behalf. They are not sub-processors under the Data Processing Agreement, and they have no access to data inside the application. They are listed here for completeness; the detail is in Section 8 of the Privacy Policy.
| Provider | Purpose | Personal data involved | Location of processing |
|---|---|---|---|
| Google (Analytics 4, Ads) |
Website analytics and advertising measurement. Loaded on every visit so a consent choice can be applied, but active only after the visitor accepts. | Cookie identifiers and usage data, only where the visitor has consented. IP addresses are anonymised. Ad personalisation stays denied even after consent. | EEA and United States, under the EU Standard Contractual Clauses. |
| Amazon Web Services | Hosting the website, and delivering the contact, partner and application forms by email (Amazon SES). | Name, email address and message content submitted through a website form. | AWS Europe (Stockholm), eu-north-1. |
| Customer.io | Marketing email, where the visitor has subscribed. | Name and email address. | Customer.io’s EU region. |
5. Contact
Questions about this list, or requests to be notified of changes to it:
Markviss AS
Tanumveien 272, 1339 Vøyenenga, Norway
Email: info@markviss.com
Phone: +47 45207543
6. Governing Language
This page is published in English, Norwegian, Swedish and Danish. The English version is the authoritative text. In the event of any discrepancy, ambiguity or conflict between the English version and any translation, the English version prevails.
Last updated: 08.09.2026