| Sub-processor | Country | Transfer mechanism | What they do for us | Relationship |
|---|---|---|---|---|
| Hosting & Infrastructure | ||||
| Amazon Web Services EMEA SARL | Luxembourg | EU/EEA cloud infrastructure. Provides compute (ECS/EC2), object storage (S3), monitoring (CloudWatch), CDN (CloudFront), and CI/CD (CodeBuild) services for EEA-hosted customers. |
Independent | |
| Amazon Web Services, Inc. | USA | Cloud infrastructure for non-EEA customers (US, APAC, ANZ). Provides compute, storage, monitoring, CDN, and build services across US, Singapore, and Australian AWS regions. |
Independent | |
| itm8 Sverige AB | Sweden | Cloud hosting for EEA customers requiring Sweden-based data residency. Provides IaaS infrastructure including ECS clusters and EC2 instances hosted within Sweden. |
Independent | |
| Content & Aviation Services | ||||
| Alpha Mike Aviation Group LLC | USA | Aviation content transfer and knowledge support services for customers migrating manuals into Web Manuals. |
Independent | |
| BizAv Services Limited | Malta | Aviation content transfer services for customers migrating manuals into Web Manuals. |
Independent | |
| JETPUBS Inc. | USA | Aviation content transfer services for customers migrating manuals into Web Manuals. |
Independent | |
| Watson Writing and Documentation Services Ltd. | Canada | Aviation content transfer services for customers migrating manuals into Web Manuals. |
Independent | |
| Knowledge Support | ||||
| MarQonform | Netherlands | Aviation regulatory knowledge support for compliance library content. |
Independent | |
| Web Manuals Group | ||||
| Web Manuals Americas AB | Sweden | Regional affiliate providing customer support and account management services for Americas-region customers. |
Affiliate | |
| Web Manuals Asia Pte. Ltd. | Singapore | Asia-Pacific affiliate providing sales support, customer onboarding, and account management for APAC-region customers. |
Affiliate | |
| Web Manuals Australia Pty Ltd | Australia | Australia and Pacific affiliate providing sales support, customer onboarding, and account management for ANZ-region customers. |
Affiliate | |
| Web Manuals Inc. | USA | US-based affiliate providing sales support, customer onboarding, and account management for North American customers. |
Affiliate | |
| Web Manuals International AB | Sweden | Group parent company. Responsible for technical development, product management, infrastructure operations, and group-wide coordination. |
Parent | |
| Web Manuals LATAM S.A. | Panama | Latin America affiliate providing sales support, customer onboarding, and account management for LATAM-region customers. |
Affiliate | |
| Web Manuals MENA FZCO | United Arab Emirates | Middle East and Africa affiliate providing sales support, customer onboarding, and account management for MENA-region customers. |
Affiliate | |
| Web Manuals Sweden AB | Sweden | Primary contracting entity for European and Nordic customers. Provides customer support, onboarding, and account management. |
Affiliate | |
| Business & Productivity | ||||
| Absorb Software UK Ltd. | United Kingdom | Learning Management System (LMS) used to deliver the Web Manuals Academy to customer users and internal training to Web Manuals personnel. Processes user contact information, course enrollments, learning progress, and completion records. | Independent | |
| Google LLC (Google Workspace) | USA | Email, calendar, file storage, and productivity suite (Gmail, Drive, Docs, Sheets, Meet). May process customer contact information in business correspondence. |
Independent | |
| PandaDoc Inc. | USA | E-signature and document management for contracts. Processes signatory names, email addresses, and signed agreement documents. |
Independent | |
| Pipedrive OÜ | Estonia | CRM system. Stores sales and account contact information for customer and prospect records. |
Independent | |
| Planhat AB | Sweden | Customer success platform. Stores account health, usage, and contact data to support customer success and renewal activities. |
Independent | |
| Slack Technologies LLC | USA | Internal team communications platform. May process limited contact information of customer representatives in support-related channels. |
Independent | |
| Zendesk Inc. | USA | Customer support ticketing platform. Processes contact information and support correspondence submitted by customer users. |
Independent | |
| Communications | ||||
| Garba AI AB | Sweden | AI-powered processing and summarisation of Zoom meeting transcripts for internal use. Processes transcript data only. |
Independent | |
| Zoom Video Communications, Inc. | USA | Video conferencing for internal meetings and customer calls. May process participant names, email addresses, and meeting recordings or transcripts. |
Independent | |
| HR & Recruitment | ||||
| Personio SE & Co. KG | Germany | HR and personnel management platform. Processes employee personal data including employment records, payroll information, and absence management. |
Independent | |
| Teamtailor AB | Sweden | Applicant tracking and recruitment platform. Processes candidate names, contact details, CVs, and application records submitted to Web Manuals. |
Independent | |
| AI & LLM Services | ||||
| Anthropic, PBC | USA / EU / SG / AU | Amelia AI: Large Language Model (LLM) hosted separately within AWS Bedrock powering Amelia, Web Manuals’ AI-assisted search and document intelligence feature. Processes aviation manual content and user queries to generate contextual answers and summaries. Internal use: Ad-hoc AI-assisted tasks (USA). |
Independent | |
| OpenAI LLC | USA | Large language model (LLM) API (GPT models) used for internal ad-hoc AI-assisted workflows and supplementary AI features. May process content and queries submitted through AI-enabled interfaces. |
Independent | |
| No sub-processor matches that search. | ||||
What the abbreviations mean
Used in the transfer mechanism column above.
- DPA Data Processing Agreement
- A contractual agreement governing how sub-processors may process personal data on our behalf, ensuring compliance with GDPR and equivalent data protection obligations.
- SCC Standard Contractual Clauses
- EU Commission-approved contractual clauses providing a lawful basis for transferring personal data to third countries outside the EEA where no adequacy decision exists.
- IGDTA Intra Group Data Transfer Agreement
- A legally binding contract between the companies of a multinational group that governs the transfer of personal data between them.
- DPF EU–US Data Privacy Framework
- A US certification scheme recognised by the EU Commission as providing an adequate level of protection for personal data transferred from the EU to the United States.
Data hosting locations
Customer data is hosted in the region determined by your organisation’s contracting entity at the time of onboarding. All data remains within the specified region unless you explicitly request otherwise. Contact us to confirm your specific hosting location.
Sweden
itm8 Sverige AB
Primary EEA host for customers requiring Swedish hosting
Germany
Amazon Web Services EMEA SARL
EU cloud infrastructure
United Kingdom
Amazon Web Services EMEA SARL
UK cloud infrastructure
United States or Canada
Amazon Web Services, Inc.
SCC + DPF safeguards apply
Singapore
Amazon Web Services, Inc.
SCC safeguards apply
Australia
Amazon Web Services, Inc.
Meets Australian Privacy Act requirements
Sub-processor changes & notification
How we keep you informed when our sub-processor list changes.
Prior notification. We will notify you before engaging any new sub-processor that will have access to personal data you have entrusted to us. This gives you the opportunity to assess the change before it takes effect.
Objection window. Customers may object to the addition of a new sub-processor by contacting our Data Protection Officer. Where a legitimate objection is raised and cannot be resolved, we will work with you in good faith to find a solution.
Existing safeguards. Before onboarding any new sub-processor, we conduct a due diligence assessment and execute a written Data Processing Agreement requiring security standards equivalent to our own. Sub-processors are not permitted to engage further sub-processors without our prior written consent.
Questions? For enquiries about specific sub-processors, data flows, or to request further information about our third-party suppliers, contact our Data Protection Officer at dpo@webmanuals.aero.

