Subprocessors
Subprocessors
The providers Selvia uses to process personal data on a business customer's behalf, as referenced in the Data Processing Agreement. Selvia keeps this list current and updates it when a subprocessor changes.
Last updated: Pre-publication draft — effective date to be set at publication
1.Provider
- Provider
- Selvia, a private trader (sole trader) (yksityinen elinkeinonharjoittaja)
- Business ID
- 3554334-7
- Domicile
- Helsinki, Finland
- Address
- Konalantie 7, 00370 Helsinki, Finland
- support@selvia.fi
This list is maintained by Selvia.
2.Current subprocessors
- Supabase (Accounting database)
- Database hosting, file storage and authentication for Selvia's accounting service. Processes the accounting, invoicing, VAT and document data the service stores. Hosted in the EU (Ireland). Supabase's own data processing terms and Standard Contractual Clauses apply to any onward transfer.
- Supabase (POS database)
- Database hosting and authentication for Selvia's point-of-sale service. Processes sales, staff-access and venue data for that product. Hosted in the EU (Sweden). Supabase's own data processing terms and Standard Contractual Clauses apply to any onward transfer.
- Vercel
- Hosts the website and web application and serves them to visitors. Processes request and technical data needed to serve those pages. Vercel's own data processing terms and Standard Contractual Clauses apply; the specific hosting region per request is not independently confirmed here.
- Google Cloud — Document AI
- Extracts text and line items from uploaded receipts, invoices and bank statements so the service doesn't require manual data entry. Processes the content of the documents a customer uploads. Google's Cloud data processing terms and Standard Contractual Clauses apply; the specific processing region is configurable and not independently confirmed here.
- Google Firebase
- Push notifications, and the primary crash-diagnostic backend for the mobile app on a phone or tablet (Crashlytics). Processes device and crash-diagnostic data, and a notification token. Google's standard Firebase/Cloud data processing terms and Standard Contractual Clauses apply.
- Sentry
- A fallback crash-diagnostic backend, used only on a session where Firebase itself fails to start — and the backend used for a browser-based build of the app, where Firebase Crashlytics is not used. Never active at the same time as Firebase Crashlytics in the same session. Processes technical error data and, where it is present in the surrounding code context, incidental diagnostic data. Sentry's own Data Processing Addendum applies (EU–US Data Privacy Framework and Standard Contractual Clauses); the specific processing region is not independently confirmed here.
- Resend
- Sends transactional email on Selvia's behalf — invoices, notifications and account-related messages. Processes the recipient's email address and the message content. Resend's own data processing terms and Standard Contractual Clauses apply.
- Google Workspace (Gmail and Drive)
- Selvia's paid business email and file-storage environment — not the owner's personal Google account. Used to receive payroll information submitted through Selvia's payroll data-collection form and to store a backup copy, and to store immigration-engagement documents a customer provides. Google's Workspace data processing terms (the Cloud Data Processing Addendum) and Standard Contractual Clauses apply; a specific Workspace data region or additional regional control is not independently confirmed here.
3.Not subprocessors
- WhatsApp / Meta — a customer-chosen channel for contacting Selvia. Selvia has no server-side WhatsApp Business API integration, so Selvia's systems don't automatically receive WhatsApp message metadata and WhatsApp doesn't process service data on Selvia's behalf. A message a customer sends is subject to WhatsApp's own terms as a messaging app, the same as any other call or message to Selvia.
- Apple App Store / Google Play — distribute the app and, where used, process in-app subscription payment under their own platform terms. They don't process Selvia's service data on Selvia's behalf.
4.Changes to this list
Selvia updates this list when it adds, removes or replaces a subprocessor. For a new subprocessor that will process personal data under the Data Processing Agreement, Selvia also emails notice where it holds a current contact email for the affected customer, as described in that agreement's subprocessor clause.
5.Contact
Questions about a subprocessor on this list: support@selvia.fi.