Current Cloud

Sub-Processors

Annexes
Annex A: ServicesAnnex B: SLAAnnex C: Terms for third-party servicesAnnex D: DPAAnnex E: Form of Call-OffAnnex F: Terms for software and products developet by AxazAxaz Insight ToolService DescriptionSLATerms of ServiceData Process agreement (DPA)SubprocessorsCurrent CloudTerms of ServiceSLAData Process agreement (DPA)Acceptable Use Policy (AUP)Service DescriptionSubscription and Billing TermsSubprocessorsAI AddendumSelf-Hosted and Dedicated AddendumPrivacy PolicyMaster Product TermsAnnex G: Axaz Partner ProgramAnnex H: Managed ServiceAnnex I: Policy for the Secure AI

Last Updated: 2026-06-11
‍

To deliver the Current Cloud services, the Provider (currently Axaz AS) engages trusted third-party service providers ("Sub-processors") who process personal data to support specific functions such as cloud infrastructure, user authentication, and transactional email communications. "Provider" has the meaning given in the Master Product Terms; when Current Cloud moves to its own company, that company becomes the Provider for this list.

This list is a supplement to our Data Processing Agreement (DPA), which governs the processing of personal data under GDPR and applicable Norwegian data protection law.

‍

Approved Sub-processors

Sub-processor
Registered Address
Service
Purpose
Processing Location
Transfer Safeguard
UpCloud Oy
Aleksanterinkatu 15 B, 7th floor, 00100 Helsinki, Finland
UpCloud
Primary hosting, virtual servers, managed databases, and Kubernetes container orchestration.
Norway (Oslo data center)
Processed entirely within the EU/EEA.
Microsoft Ireland Operations Ltd
One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
Microsoft Entra ID
User authentication, identity verification, and Single Sign-On (SSO). (Only applicable if the Customer chooses to enable Microsoft sign-in for their users)
EU/EEA (Ireland / Netherlands)
Processed within EU/EEA. SCC as supplementary safeguard for any non-EEA support.
Google Cloud EMEA Limited
Velasco, Clanwilliam Place, Dublin 2, Ireland
Google Identity Services
User authentication, identity verification, and Single Sign-On (SSO). (Only applicable if the Customer chooses to enable Google sign-in for their users)
EU/EEA
EU-US Data Privacy Framework (DPF); Google LLC (US parent) is a certified DPF participant. SCC as supplementary safeguard.
EuroMail
Finland
EuroMail
Delivery of transactional emails, authentication magic links, and system alerts.
EU/EEA (Finland)
Processed entirely within the EU/EEA. DPA available at euromail.dev.

‍

Note on the "Customer's own cloud subscription" Hosting Model: Where Current Cloud runs inside the Customer's own cloud tenancy (for example, Microsoft Azure or Google Cloud Platform), the relevant cloud provider acts under the Customer's own agreement with that provider and is not a Sub-processor of the Provider for that deployment.

‍

Categories of Data Processed

  • User account and login information.
  • Customer Data uploaded to or integrated with the Service (as determined by the Customer).
  • Usage, monitoring, and log data needed to operate the Service.

‍

Data Subjects

  • Authorized Users and employees of the Customer.
  • Individuals whose data is contained in the Customer's integrated source systems.

‍

Storage Period

Customer data is stored and backed up while the subscription is active. Data is permanently deleted within 30 days after account termination, unless the Customer instructs earlier deletion or the law requires retention.

‍

Updates to This List

We review our Sub-processors regularly and update this list at least thirty (30) days before authorizing any new Sub-processor to process Personal Data.

‍

If you are a Customer, you may object to a new Sub-processor under the terms in our DPA. For questions, contact us at support@axaz.com.