Sub-processors – navichain
| Last updated | 1 November 2026 |
| Applies to | The navichain Service, operated by Navilog Solutions AB, and the navichain.se website, operated by Navichain AB |
| Changes | Customers are informed at least 30 days before a sub-processor is added or replaced (Data Processing Agreement, section 5). |
This page lists the service providers that process personal data on our behalf, what they process, where they are established, and the safeguard that covers any processing outside the EU/EEA. It is referenced from the Privacy Policy and from Annex 3 of the Data Processing Agreement.
1. Providers that process customer data for the Service
| Provider | Service | Data | Established | Safeguard for processing outside the EU/EEA |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting of one node of our database cluster, which holds replicas of customer databases | The customer databases replicated to that node | Germany; the data centre is in Finland | Not needed (EU) |
| Berget AI AB | AI functions in the Service (document import, cargo checks, border-wait estimates, the assistant). Zero data retention; no training on customer data. | The content the function needs, e.g. a booking document or a question | Sweden | Not needed |
| Lettermint | Delivery of email the Service sends: invitations, invoices, offers, consignment notes, tracking links, reminders | Recipient address and name, mail content | Netherlands | Not needed |
| 46elks AB | Delivery of text messages the Service sends | Phone number, message text | Sweden | Not needed |
| Expo, Inc.; Google LLC (Firebase Cloud Messaging); Apple Inc. (Apple Push Notification service) | Delivery of push notifications to the navichain 365 app | Device token, notification title and text | Outside the EU/EEA | EU standard contractual clauses or an EU adequacy decision |
| HERE Global B.V. | Geocoding, routing, traffic, map display | Address or coordinates only | Netherlands | EU standard contractual clauses, where HERE processes outside the EEA |
| HeiGIT gGmbH (openrouteservice) | Routing and isochrones | Coordinates only | Germany | Not needed |
| OpenStreetMap Foundation (Nominatim) | Reverse geocoding | Coordinates only | United Kingdom | EU adequacy decision |
| FOSSGIS e.V. (Overpass API) | Rest areas and border crossings along a route | Route geometry only | Germany | Not needed |
| OpenWeather Ltd | Weather along a route | Coordinates only | United Kingdom | EU adequacy decision |
| Migadu-Mail GmbH | Our own mailboxes, used for support correspondence | Support emails | Switzerland | EU adequacy decision |
| Navilog Solutions AB’s individual technical contractors (2 people) | Remote development, operation and support, under Navilog’s authority; no local storage of data | Access to the systems above as a task requires | Outside the EU/EEA, remote access only | EU standard contractual clauses and a transfer impact assessment |
1b. Independent controllers
These providers receive data from the Service but process it under their own terms and for their own purposes as well as ours, so they are independent controllers rather than sub-processors.
| Provider | Service | Data | Established | Transfer safeguard |
|---|---|---|---|---|
| Google LLC / Google Ireland Limited (Google Maps Platform) | Directions and reverse geocoding; the map component in the mobile app | Coordinates only, no name or account | Outside the EU/EEA (Google Ireland Limited for the EEA) | Google’s controller-to-controller data protection terms: EU standard contractual clauses, adequacy decisions or the EU–US Data Privacy Framework |
2. Our own infrastructure
Application servers, two of the three database cluster nodes, document storage and backups are operated by Navilog Solutions AB in Sweden; the third cluster node is hosted by Hetzner in Finland (part 1). Route snapping, the telematics server and the optional per-customer Nextcloud are hosted by Navilog Solutions AB in Sweden. These are not sub-processors.
3. Services your browser or phone contacts directly
Map screens in the Service load map images and fonts from HERE, from a map-tile provider outside the EU/EEA, from OpenStreetMap and from a content delivery network. The mobile app shows maps through the map components of the phone’s platform. These services see the device’s IP address when the content loads; they process nothing on our instruction and we do not use them to track you.
4. Integrations a customer connects itself
Accounting, carrier, telematics and payment integrations (for example Fortnox, Visma, QuickBooks Online, LogTrade, Fraktjakt, Opter, external sensor providers, Stripe Connect, Mollie payment links, EDI partners) run under the customer’s own account and agreement with that provider. The Service passes data to them only on the customer’s instruction. They are not sub-processors of Navilog Solutions AB.
5. Provider for our own billing
Navilog Solutions AB uses Stripe (Stripe Payments Europe, Ltd., Ireland) to bill subscription fees, with affiliates outside the EU/EEA under the EU standard contractual clauses and an EU adequacy decision. This concerns our own customer relationship, not customer data in the Service.
Change log
| Date | Change |
|---|---|
| 1 November 2026 | First published list; Hetzner added the same day after a cluster review; Google Maps Platform moved to independent controllers after reading its terms |