The companies Arctiv AB uses to run Propiler, what they do and where they are.
Last updated 2026-10-24
Current subprocessors
Amazon Web Services EMEA SARL
Purpose
Hosting of the Propiler service: database, file storage, sign-in (Amazon Cognito), sign-in and verification emails (Amazon SES), logs.
Personal data
All service data: accounts, workspaces, equipment, packlists, activity, photos, logs.
Location
EU — Stockholm, Sweden (eu-north-1)
Transfer safeguard
Data stays in the EU.
Vercel Inc.
Purpose
Hosting of the web app (my.propiler.app), the admin console and the documentation site.
Personal data
Web requests (IP address, browser details) and, for the cut-out image helper, photo bytes in transit.
Location
Web functions in Stockholm, Sweden (arn1); content delivered from Vercel's edge network
Transfer safeguard
Vercel Inc. is a US company: EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
Anthropic PBC
Purpose
AI analysis of equipment photos, when AI photo analysis is used and allowed by the organization.
Personal data
The equipment photo being analysed and the request text. No account details are sent.
Location
USA
Transfer safeguard
EU Standard Contractual Clauses.
Resend, Inc.
Purpose
Transactional email, such as invitations to a workspace or an organization.
Personal data
Recipient email address, the name of the person inviting, the email content.
Location
USA
Transfer safeguard
EU Standard Contractual Clauses.
Apple Inc.
Purpose
Push notifications to the iOS app (Apple Push Notification service).
Personal data
Device push token and the notification text.
Location
USA
Transfer safeguard
EU–US Data Privacy Framework and EU Standard Contractual Clauses.
Google LLC
Purpose
Maps in the iOS app and the web portal (Google Maps), and the place search when someone gives a storage place an address (Places API).
Personal data
The map area being viewed, the device's or browser's IP address, and the text typed into the place search. Activity pins are drawn on the device.
Location
USA
Transfer safeguard
EU–US Data Privacy Framework and EU Standard Contractual Clauses.
OpenStreetMap Foundation
Purpose
Map tiles for the web map only when Google Maps is unavailable (fallback).
Personal data
The map area being viewed and your browser's IP address (your browser fetches the tiles directly).
Location
United Kingdom
Transfer safeguard
EU adequacy decision for the United Kingdom.
Brave Software, Inc.
Purpose
Image search when you look for a product photo by name.
Personal data
The search text only (for example a product name). No personal data is sent.
Location
USA
Transfer safeguard
No personal data is transferred.
Recipients you choose
Google — if you sign in with “Continue with Google”, Google handles that sign-in under its own terms.
Your browser’s push service (for example from Google, Mozilla, Apple or Microsoft) — if you turn on notifications in the web app. The message content is end-to-end encrypted.
AI assistants and API clients you connect — they receive the data you or your organization allow them to read.
Not in use
Stripe (card payments) is only used if card payment is switched on for your organization. Today Propiler is billed by invoice.
Changes
We update this page before we add or replace a subprocessor, and we tell customers who have a data processing agreement in advance, so they can object. Questions: support@crdbag.com.
Propiler is a trademark of Arctiv AB · Org. no. 559279-9703 · Grönborgsgatan 2, 852 33 Sundsvall, Sweden
Contact: support@crdbag.com