Sub-processor List
A complete overview of the third-party companies we engage to help deliver Web Manuals. All sub-processors are bound by written data processing agreements and are required to uphold data protection and security standards that are no less protective than our own. We notify customers before engaging any new sub-processor that will process their personal data.
Last updated: 1 April 2026
29 sub-processors
12 countries
Your data, protected by contract
Every sub-processor listed here is bound by a Data Processing Agreement with Web Manuals. All sub-processors are required to maintain security measures equivalent to ISO 27001 and are subject to confidentiality obligations. For questions, contact our Data Protection Officer at dpo@webmanuals.aero.
| Sub-processor | Country | Transfer mechanism | Service | Relationship |
|---|---|---|---|---|
| Hosting & Infrastructure | ||||
itm8 Sverige AB |
🇸🇪Sweden |
Cloud hosting for EEA customers requiring Sweden-based data residency. Provides IaaS infrastructure including ECS clusters and EC2 instances hosted within Sweden. | Independent | |
Amazon Web Services EMEA SARL |
🇱🇺Luxembourg |
EU/EEA cloud infrastructure. Provides compute (ECS/EC2), object storage (S3), monitoring (CloudWatch), CDN (CloudFront), and CI/CD (CodeBuild) services for EEA-hosted customers. | Independent | |
Amazon Web Services, Inc. |
🇺🇸USA |
Cloud infrastructure for non-EEA customers (US, APAC, ANZ). Provides compute, storage, monitoring, CDN, and build services across US, Singapore, and Australian AWS regions. | Independent | |
| Content & Aviation Services | ||||
Alpha Mike Aviation Group LLC |
🇺🇸USA |
Aviation content transfer and knowledge support services for customers migrating manuals into Web Manuals. | Independent | |
BizAv Services Limited |
🇲🇹Malta |
Aviation content transfer services for customers migrating manuals into Web Manuals. | Independent | |
JETPUBS Inc. |
🇺🇸USA |
Aviation content transfer services for customers migrating manuals into Web Manuals. | Independent | |
Watson Writing and Documentation Services Ltd. |
🇨🇦Canada |
Aviation content transfer services for customers migrating manuals into Web Manuals. | Independent | |
| Knowledge Support | ||||
MarQonform |
🇳🇱Netherlands |
Aviation regulatory knowledge support for compliance library content. | Independent | |
| Web Manuals Group | ||||
Web Manuals International AB |
🇸🇪Sweden |
Group parent company. Responsible for technical development, product management, infrastructure operations, and group-wide coordination. | Parent | |
Web Manuals Americas AB |
🇸🇪Sweden |
Regional affiliate providing customer support and account management services for Americas-region customers. | Affiliate | |
Web Manuals Sweden AB |
🇸🇪Sweden |
Primary contracting entity for European and Nordic customers. Provides customer support, onboarding, and account management. | Affiliate | |
Web Manuals Inc. |
🇺🇸USA |
US-based affiliate providing sales support, customer onboarding, and account management for North American customers. | Affiliate | |
Web Manuals Asia Pte. Ltd. |
🇸🇬Singapore |
Asia-Pacific affiliate providing sales support, customer onboarding, and account management for APAC-region customers. | Affiliate | |
Web Manuals Australia Pty Ltd |
🇦🇺Australia |
Australia and Pacific affiliate providing sales support, customer onboarding, and account management for ANZ-region customers. | Affiliate | |
Web Manuals LATAM S.A. |
🇵🇦Panama |
Latin America affiliate providing sales support, customer onboarding, and account management for LATAM-region customers. | Affiliate | |
Web Manuals MENA FZCO |
🇦🇪UAE |
Middle East and Africa affiliate providing sales support, customer onboarding, and account management for MENA-region customers. | Affiliate | |
| Business & Productivity | ||||
Slack Technologies LLC |
🇺🇸USA |
Internal team communications platform. May process limited contact information of customer representatives in support-related channels. | Independent | |
Pipedrive OÜ |
🇪🇪Estonia |
CRM system. Stores sales and account contact information for customer and prospect records. | Independent | |
Planhat AB |
🇸🇪Sweden |
Customer success platform. Stores account health, usage, and contact data to support customer success and renewal activities. | Independent | |
PandaDoc Inc. |
🇺🇸USA |
E-signature and document management for contracts. Processes signatory names, email addresses, and signed agreement documents. | Independent | |
Zendesk Inc. |
🇺🇸USA |
Customer support ticketing platform. Processes contact information and support correspondence submitted by customer users. | Independent | |
Google LLC (Google Workspace) |
🇺🇸USA |
Email, calendar, file storage, and productivity suite (Gmail, Drive, Docs, Sheets, Meet). May process customer contact information in business correspondence. | Independent | |
Absorb Software UK Ltd. |
🇬🇧United Kingdom |
Learning Management System (LMS) used to deliver the Web Manuals Academy to customer users and internal training to Web Manuals personnel. Processes user contact information, course enrollments, learning progress, and completion records. | Independent | |
| Communications | ||||
Zoom Video Communications, Inc. |
🇺🇸USA |
Video conferencing for internal meetings and customer calls. May process participant names, email addresses, and meeting recordings or transcripts. | Independent | |
Garba AI AB |
🇸🇪Sweden |
AI-powered processing and summarisation of Zoom meeting transcripts for internal use. Processes transcript data only. | Independent | |
| HR & Recruitment | ||||
Teamtailor AB |
🇸🇪Sweden |
Applicant tracking and recruitment platform. Processes candidate names, contact details, CVs, and application records submitted to Web Manuals. | Independent | |
Personio SE & Co. KG |
🇩🇪Germany |
HR and personnel management platform. Processes employee personal data including employment records, payroll information, and absence management. | Independent | |
| AI & LLM Services | ||||
Anthropic, PBC |
🇺🇸
🇪🇺
🇸🇬
🇦🇺
USA / EU / SG / AU
|
Amelia AI
Large Language Model (LLM) hosted separately within AWS Bedrock powering Amelia, Web Manuals' AI-assisted search and document intelligence feature. Processes aviation manual content and user queries to generate contextual answers and summaries.
|
Independent | |
| Anthropic, PBC (continued) 🇺🇸USA |
Internal Use
Ad-hoc AI-assisted tasks.
|
Independent | ||
OpenAI LLC |
🇺🇸USA |
Large language model (LLM) API (GPT models) used for internal ad-hoc AI-assisted workflows and supplementary AI features. May process content and queries submitted through AI-enabled interfaces. | Independent | |
Data Hosting Locations
Customer data is hosted in the region determined by your organisation's contracting entity at the time of onboarding. All data remains within the specified region unless you explicitly request otherwise. Contact us to confirm your specific hosting location.
EEA Customers
🇸🇪 Sweden
itm8 Sverige AB
Primary EEA host for customers requiring Swedish hosting
EEA Customers
🇩🇪 Germany
Amazon Web Services EMEA SARL
EU cloud infrastructure
EEA Customers
🇬🇧 United Kingdom
Amazon Web Services EMEA SARL
UK cloud infrastructure
North and South American Customers
🇺🇸🇨🇦 United States or Canada
Amazon Web Services, Inc.
SCC + DPF safeguards apply
APAC Customers
🇸🇬 Singapore
Amazon Web Services, Inc.
SCC safeguards apply
ANZ Customers
🇦🇺 Australia
Amazon Web Services, Inc.
Meets Australian Privacy Act requirements
Sub-processor Changes & Notification
How we keep you informed when our sub-processor list changes.
Prior notification. We will notify you before engaging any new sub-processor that will have access to personal data you have entrusted to us. This gives you the opportunity to assess the change before it takes effect.
Objection window. Customers may object to the addition of a new sub-processor by contacting our Data Protection Officer. Where a legitimate objection is raised and cannot be resolved, we will work with you in good faith to find a solution.
Existing safeguards. Before onboarding any new sub-processor, we conduct a due diligence assessment and execute a written Data Processing Agreement requiring security standards equivalent to our own. Sub-processors are not permitted to engage further sub-processors without our prior written consent.
Questions? For enquiries about specific sub-processors, data flows, or to request further information about our third-party suppliers, contact our Data Protection Officer at dpo@webmanuals.aero.
Definitions
Abbreviations used in the Transfer Mechanism column.
DPA
Data Processing Agreement
A contractual agreement governing how sub-processors may process personal data on our behalf, ensuring compliance with GDPR and equivalent data protection obligations.
SCC
Standard Contractual Clauses
EU Commission-approved contractual clauses providing a lawful basis for transferring personal data to third countries outside the EEA where no adequacy decision exists.
IGDTA
Intra Group Data Transfer Agreement
IGTA stands for Intra Group Data Transfer Agreement and is a legally binding contract between multinational organizations that governs the transfer of personal data between different companies within the same group of companies.
DPF
EU–US Data Privacy Framework
A US certification scheme recognised by the EU Commission as providing an adequate level of protection for personal data transferred from the EU to the United States.