Legal
Sub-processor Register
Current, version-controlled register · referenced by the Standard Data Processing Agreement
This is the register the Standard Data Processing Agreement refers to as the Sub-processor Register: the current, version-controlled overview of the sub-processors Omniday (Clouda ApS, CVR 41509775) uses to process Customer Personal Data. Only providers and features actually used for the Customer process the Customer's data. Location and the GDPR Chapter V transfer basis are stated per provider; upon request, Omniday makes documentation of the transfer basis available, subject to necessary redaction of confidential information.
| Provider | Purpose | Location | Transfer basis |
|---|---|---|---|
| Microsoft Ireland Operations Limited | Hosting, database, file storage, key management and identity; AI language model and vectorisation; operational and security logging as well as quality and error monitoring. | EU: Azure regions in the Netherlands and Sweden; the language model runs within the EU Data Zone. | EU processing; Microsoft Products and Services Data Protection Addendum incl. EU Standard Contractual Clauses where applicable |
| Twilio Inc. (SendGrid) | Sending of transactional e-mails, where the feature is activated. | EU data residency is used for Customer Data. | EU data residency for Customer Data; EU Standard Contractual Clauses with the US parent |
Integrations with the Customer's own systems
INTEGRATIONS WITH THE CUSTOMER’S OWN SYSTEMS
Where the Customer connects the platform to a system the Customer itself has an agreement with — for example its own booking or case-management system — and access takes place using credentials issued within the Customer’s own customer relationship, the provider of that system is not a sub-processor under this DPA. In that case, Omniday merely transmits data to and from the system on the Customer’s instructions, and the Customer’s own agreement with the provider governs the processing there.
Where Omniday itself engages a provider as part of the service, the provider is added to the Sub-processor Register in accordance with Section 7 before processing begins.
How changes to this register are notified
Changes follow Section 7 of the Standard Data Processing Agreement, which provides:
Omniday notifies the Customer’s account administrator at least 30 days before a planned addition or replacement. The Customer may raise a reasoned objection within 14 days. The parties will first seek a reasonable solution; if this is not possible, the Customer may deactivate the affected feature or terminate the affected service before the change takes effect.
Customers are notified directly by e-mail — notices are sent to the Customer's account administrator.
Changelog
| Date | Change | Effective date | DPA version |
|---|---|---|---|
| 2026-08-05 | Register created with the initial sub-processor list. | 2026-08-05 | standard-1.0-en |