Get ready for Web Manuals new XML WebinarLearn More

Sub-processors

A complete overview of the third-party companies we engage to help deliver Web Manuals. All sub-processors are bound by written data processing agreements and are required to uphold data protection and security standards that are no less protective than our own. We notify customers before engaging any new sub-processor that will process their personal data.

Last updated

Every company on this list is bound by contract. Each one has a Data Processing Agreement with Web Manuals, is required to maintain security measures equivalent to ISO 27001, and is under confidentiality obligations. For questions, write to our Data Protection Officer at dpo@webmanuals.aero.

29 sub-processors in 13 countries · updated April 1, 2026
Sub-processor Country Transfer mechanism What they do for us Relationship
Hosting & Infrastructure
Amazon Web Services EMEA SARL Luxembourg DPA

EU/EEA cloud infrastructure. Provides compute (ECS/EC2), object storage (S3), monitoring (CloudWatch), CDN (CloudFront), and CI/CD (CodeBuild) services for EEA-hosted customers.

Independent
Amazon Web Services, Inc. USA DPA SCC DPF

Cloud infrastructure for non-EEA customers (US, APAC, ANZ). Provides compute, storage, monitoring, CDN, and build services across US, Singapore, and Australian AWS regions.

Independent
itm8 Sverige AB Sweden DPA

Cloud hosting for EEA customers requiring Sweden-based data residency. Provides IaaS infrastructure including ECS clusters and EC2 instances hosted within Sweden.

Independent
Content & Aviation Services
Alpha Mike Aviation Group LLC USA DPA SCC

Aviation content transfer and knowledge support services for customers migrating manuals into Web Manuals.

Independent
BizAv Services Limited Malta DPA

Aviation content transfer services for customers migrating manuals into Web Manuals.

Independent
JETPUBS Inc. USA DPA SCC

Aviation content transfer services for customers migrating manuals into Web Manuals.

Independent
Watson Writing and Documentation Services Ltd. Canada DPA SCC

Aviation content transfer services for customers migrating manuals into Web Manuals.

Independent
Knowledge Support
MarQonform Netherlands DPA

Aviation regulatory knowledge support for compliance library content.

Independent
Web Manuals Group
Web Manuals Americas AB Sweden IGDTA

Regional affiliate providing customer support and account management services for Americas-region customers.

Affiliate
Web Manuals Asia Pte. Ltd. Singapore IGDTA

Asia-Pacific affiliate providing sales support, customer onboarding, and account management for APAC-region customers.

Affiliate
Web Manuals Australia Pty Ltd Australia IGDTA

Australia and Pacific affiliate providing sales support, customer onboarding, and account management for ANZ-region customers.

Affiliate
Web Manuals Inc. USA IGDTA

US-based affiliate providing sales support, customer onboarding, and account management for North American customers.

Affiliate
Web Manuals International AB Sweden IGDTA

Group parent company. Responsible for technical development, product management, infrastructure operations, and group-wide coordination.

Parent
Web Manuals LATAM S.A. Panama IGDTA

Latin America affiliate providing sales support, customer onboarding, and account management for LATAM-region customers.

Affiliate
Web Manuals MENA FZCO United Arab Emirates IGDTA

Middle East and Africa affiliate providing sales support, customer onboarding, and account management for MENA-region customers.

Affiliate
Web Manuals Sweden AB Sweden IGDTA

Primary contracting entity for European and Nordic customers. Provides customer support, onboarding, and account management.

Affiliate
Business & Productivity
Absorb Software UK Ltd. United Kingdom DPA Learning Management System (LMS) used to deliver the Web Manuals Academy to customer users and internal training to Web Manuals personnel. Processes user contact information, course enrollments, learning progress, and completion records. Independent
Google LLC (Google Workspace) USA DPA DPF

Email, calendar, file storage, and productivity suite (Gmail, Drive, Docs, Sheets, Meet). May process customer contact information in business correspondence.

Independent
PandaDoc Inc. USA DPA DPF

E-signature and document management for contracts. Processes signatory names, email addresses, and signed agreement documents.

Independent
Pipedrive OÜ Estonia DPA DPF

CRM system. Stores sales and account contact information for customer and prospect records.

Independent
Planhat AB Sweden DPA

Customer success platform. Stores account health, usage, and contact data to support customer success and renewal activities.

Independent
Slack Technologies LLC USA DPA DPF

Internal team communications platform. May process limited contact information of customer representatives in support-related channels.

Independent
Zendesk Inc. USA DPA DPF

Customer support ticketing platform. Processes contact information and support correspondence submitted by customer users.

Independent
Communications
Garba AI AB Sweden DPA

AI-powered processing and summarisation of Zoom meeting transcripts for internal use. Processes transcript data only.

Independent
Zoom Video Communications, Inc. USA DPA DPF

Video conferencing for internal meetings and customer calls. May process participant names, email addresses, and meeting recordings or transcripts.

Independent
HR & Recruitment
Personio SE & Co. KG Germany DPA

HR and personnel management platform. Processes employee personal data including employment records, payroll information, and absence management.

Independent
Teamtailor AB Sweden DPA

Applicant tracking and recruitment platform. Processes candidate names, contact details, CVs, and application records submitted to Web Manuals.

Independent
AI & LLM Services
Anthropic, PBC USA / EU / SG / AU DPA SCC DPF

Amelia AI: Large Language Model (LLM) hosted separately within AWS Bedrock powering Amelia, Web Manuals’ AI-assisted search and document intelligence feature. Processes aviation manual content and user queries to generate contextual answers and summaries.

Internal use: Ad-hoc AI-assisted tasks (USA).

Independent
OpenAI LLC USA DPA SCC DPF

Large language model (LLM) API (GPT models) used for internal ad-hoc AI-assisted workflows and supplementary AI features. May process content and queries submitted through AI-enabled interfaces.

Independent

What the abbreviations mean

Used in the transfer mechanism column above.

DPA Data Processing Agreement
A contractual agreement governing how sub-processors may process personal data on our behalf, ensuring compliance with GDPR and equivalent data protection obligations.
SCC Standard Contractual Clauses
EU Commission-approved contractual clauses providing a lawful basis for transferring personal data to third countries outside the EEA where no adequacy decision exists.
IGDTA Intra Group Data Transfer Agreement
A legally binding contract between the companies of a multinational group that governs the transfer of personal data between them.
DPF EU–US Data Privacy Framework
A US certification scheme recognised by the EU Commission as providing an adequate level of protection for personal data transferred from the EU to the United States.

Data hosting locations

Customer data is hosted in the region determined by your organisation’s contracting entity at the time of onboarding. All data remains within the specified region unless you explicitly request otherwise. Contact us to confirm your specific hosting location.

EEA customers

Sweden

itm8 Sverige AB

Primary EEA host for customers requiring Swedish hosting

EEA customers

Germany

Amazon Web Services EMEA SARL

EU cloud infrastructure

EEA customers

United Kingdom

Amazon Web Services EMEA SARL

UK cloud infrastructure

North and South American customers

United States or Canada

Amazon Web Services, Inc.

SCC + DPF safeguards apply

APAC customers

Singapore

Amazon Web Services, Inc.

SCC safeguards apply

ANZ customers

Australia

Amazon Web Services, Inc.

Meets Australian Privacy Act requirements

Sub-processor changes & notification

How we keep you informed when our sub-processor list changes.

Prior notification. We will notify you before engaging any new sub-processor that will have access to personal data you have entrusted to us. This gives you the opportunity to assess the change before it takes effect.

Objection window. Customers may object to the addition of a new sub-processor by contacting our Data Protection Officer. Where a legitimate objection is raised and cannot be resolved, we will work with you in good faith to find a solution.

Existing safeguards. Before onboarding any new sub-processor, we conduct a due diligence assessment and execute a written Data Processing Agreement requiring security standards equivalent to our own. Sub-processors are not permitted to engage further sub-processors without our prior written consent.

Questions? For enquiries about specific sub-processors, data flows, or to request further information about our third-party suppliers, contact our Data Protection Officer at dpo@webmanuals.aero.

Revision history

Every version, and when it applied

Earlier revisions stay published so you can show an auditor exactly which text was in force on a given date.

Revision In force from Until What changed Document
— In force Present Sub-processor list published in the Trust Center. Viewing

Have questions? Contact us.

Reach out to our sales team for questions about our products and capabilities.