Hapio Sub-processors
Hapio (operated by Viström Digital Development AB, Hertig Johans Gata 16, 541 40 Skövde, Sweden) uses certain third-party companies and individuals (“Sub-processors“) to help us provide, secure, and support the Hapio Service.
This page is referenced in Section 6.2 of our Data Processing Agreement (the “DPA“) and lists the Sub-processors currently authorized to Process Controller Data (i.e., the data our customers submit to Hapio via the API on behalf of their own end users), as well as additional providers used to run our business more broadly.
1. How we handle changes
Before we add a new Sub-processor that will Process Controller Data, we will update this page and notify you by email at least 30 days in advance, in line with Section 6.3 of the DPA. If you have a reasonable, documented data-protection objection to a new Sub-processor, you may raise it in writing within 14 days of that notice per Section 6.4 of the DPA.
2. Sub-processors of Controller Data
These entities may process the booking, scheduling, and end-user data our customers submit through the Hapio API.
| Entity | Role | Corporate Location |
| Amazon Web Services, Inc. | Cloud hosting, infrastructure, DNS, and service email delivery | United States (data processed in the EU — Frankfurt) |
| Laravel Holdings Inc. | Infrastructure and deployment management | United States |
3. Additional service providers
These entities support our own business operations — website, billing, marketing, and customer support — and may process personal data about our visitors, account holders, and billing contacts, but are not intended to process Controller Data.
| Entity | Role | Corporate Location |
| Paddle | Billing and payment processing | United Kingdom (Paddle.com Market Limited) |
| The Constant Company, LLC (Vultr) | Website and documentation hosting (hapio.io, docs.hapio.io) | United States |
| The Rocket Science Group, LLC (Mailchimp) | Email service provider | United States |
| Text S.A. (formerly LiveChat Software; product name “LiveChat”) | Customer support platform | Poland (EU) — note: rebranded from “LiveChat Software” to “Text” in 2023; confirm which entity (Text S.A., Poland, or its US subsidiary Text, Inc.) is the actual contracting party on your account |
| Google LLC | Web services provider (site functionality, forms, and business tools) | United States |
| InnoCraft Ltd (Matomo Cloud) | Website analytics | New Zealand (data stored in the EU; covered by the EU’s adequacy decision for New Zealand) |
| Usercentrics A/S (Cookiebot) | Consent management platform | Denmark (EU) |
4. International transfers
Where a Sub-processor is located outside the EEA (including in the United States), we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision. Contact us for more information about the safeguards used for a specific transfer.
5. Enterprise data residency options
Hapio’s architecture is not tied to a single cloud provider. Enterprise customers with specific data residency or vendor requirements (e.g., EU-only infrastructure, excluding AWS) can arrange alternative hosting as part of their agreement. Where such an arrangement is in place, the applicable sub-processors are documented in that customer’s specific DPA rather than this general list. Contact us at hi@hapio.io to discuss options.
Last updated: 2026-08-12