# Sub-processors - v2.0

Last updated: 29/01/2026
Version effective from: 29/01/2026


# List of sub-suppliers and sub-processors (other than identity issuers and third-party providers)

Signicat Group Sub-processors
Business name Company registration number Address Service Processing Data location
Signicat AB 556761-5561 c/o iOffice, Drottninggatan 33,
111 51 Stockholm,
Sweden
Signicat Services. End user personal data, as defined in the DPA Appendix Checklist with the Processor. EU/EEA
Signicat AS NO989584022 Beddingen 16,
7042 Trondheim,
Norway
Delivery of Signicat Services and data processing. End user personal data, as defined in the DPA Appendix Checklist with the Processor. EU/EEA
Signicat S.L.U. B-86681533 Av. de la Ciudadde Barcelona,
81, 4, Retiro,
28007 Madrid,
Spain
Hosting services and core systems. End user personal data, as defined in the DPA Appendix Checklist with the Processor. EU/EEA
Symphonic Solutions Limited 07932378 8 Hermitage St,
London W2 1BE,
United Kingdom
Hosting services and core systems. End user personal data, as defined in the DPA Appendix Checklist with the Processor. EU/EEA
UK
Dokobit, UAB 301549834 Paupio st. 50-136,
11341 Vilnius,
Lithuania
Hosting services and core systems.
Dokobit Sign Portal
End user personal data, as defined in the DPA Appendix Checklist with the Processor. EU/EEA
Signicat B.V. 24444001 Weena 327-329,
3013 AL Rotterdam,
The Netherlands
Hosting services and core systems. End user personal data, as defined in the DPA Appendix Checklist with the Processor. EU/EEA
Signicat GmbH HRB 110822 Ludwigstraße 9,
80539 München/Munich,
Germany
Operational support. End user personal data, as defined in the DPA Appendix Checklist with the Processor. EU/EEA
Signicat Iceland 5101161000 Akralind 3,
201 Kopavogur,
Iceland
Operational support. End user personal data, as defined in the DPA Appendix Checklist with the Processor. EU/EEA


Signicat Sub-processor and Sub-supplier list
Business name Company registration number Address Service Processing Data location Specific products
Google Ireland Limited 368047 Gordon House,
Barrow Street,
Dublin 4,
Ireland
Hosting services and core systems. End user personal data, as defined in the DPA Appendix Checklist. EU/EEA1 All products
Mailgun 802653513 Mailgun Technologies, Inc.'s (French subsidiary)
4 rue JulesLefebvre,
75009 Paris,
France
Hosting of mail server for notification emails. End user e-mail address. EU/EEA All products
Link Mobility AS NO992434643 Langkaia 1,
Havnelageret,
0150 Oslo,
Norway
SMS Gateway. End user phone number. EU/EEA All products
46elks AB 556838-8184 Smedsgränd 4,
753 20 Uppsala,
Sweden
SMS Gateway (primary). End user phone number. EU/EEA All products
Orange Business Digital Norway NO982211743 Lørenfaret 1 E,
0585 Oslo,
Norway
Hosting services and core systems.
Email Gateway.
End user personal data, as defined in the DPA Appendix Checklist.
End user email address.
EU/EEA Signicat Electronic Signature API

Signicat eID Hub
T-Systems Nordic TC Services NO986087796 Karenslyst Allè 56,
POB 733 Skøyen
0214 Oslo,
Norway
Hosting services and core systems. End user personal data, as defined in the DPA Appendix Checklist. EU/EEA Signicat eID Hub
T-Systems International GmbH HRB 55933 Hahnstraße 43d,
60528 Frankfurt am Main,
Germany
Public Cloud Provider. End user personal data, as defined in the DPA Appendix Checklist. EU/EEA ReadID
Puzzel AS NO916938705 Fredrik Selmers vei 3,
0663 Oslo,
Norway
SMS Gateway. End user phone number. EU/EEA Signicat Electronic Signature API
Buypass AS NO983163327 Gullhaug Torg 2D,
0484 Oslo,
Norway
Buypass BCSS service for one-shot certificates and AES/QES signing. End user data, as defined in the DPA Appendix Checklist. EU/EEA Signicat Electronic Signature API
MongoDB 499992 Building 2 Number One Ballsbridge,
Shelbourne Rd,
Ballsbridge,
Dublin 4,
D04 Y3X9,
Ireland
Data Storage End user personal data, as defined in the DPA Appendix Checklist and as per customer configuration. EU/EEA2 Signicat Mint

SmileID

Electronic Signature API3
Amazon Web Services B186284 38 Avenue John F. Kennedy,
L-1855,
Luxembourg
Hosting services and core systems. End user personal data, as defined in the DPA Appendix Checklist. EU/EEA4 Signicat eID Hub

Signicat S-IAM

Dokobit by Signicat

VideoID

SmileID

SignatureID

ReadID
CloudAMQP 777775623 Torsgatan 26,
113 21 Stockholm,
Sweden
Queue as a service. End user personal data, as defined in the DPA Appendix Checklist. EU/EEA SmileID

SignatureID
Infraestructures I Serveis De Telecomunicacions I Certificacio Sa. (ACCV) A40573396 Poligono Residencial Ademuz s/n,
Burjassot,
46100 Valencia,
Spain
Generation of timestamp on user data. End user personal data, as defined in the DPA Appendix Checklist. EU/EEA VideoID

SignatureID
Todo En Cloud ESB86266533 Av. de la Albufera, 319,
Oficina 301,
28031 Madrid,
Spain
Hosting services and core systems. End user personal data, as defined in the DPA Appendix Checklist. EU/EEA VideoID

SignatureID
SERVINFORM, S.A. A41050980 C/ Manufacturas, nº 11,
en Polígono Industrial P.I.S.A., de Mairena del Aljarafe,
(C.P.: 41927) Sevilla,
Spain
HBPO
Technical support .
End user personal data, as defined in the DPA Appendix Checklist. EU/EEA VideoID

SignatureID
Microsoft Azure 256796 One Microsoft Place,
South County Business Park,
Dublin D18 P521,
Ireland
Hosting services and core systems. All PII processed by Signicat. EU/EEA VideoID

SignatureID
UANATACA, S.A. ES A66721499 Av. Meridiana 350,
3era Planta,
08027 Barcelona,
Spain
Certificate issuing service. End user personal data, as defined in the DPA Appendix Checklist. EU/EEA SignatureID QES
Commify Iberia S.L. B-63816284 Av. Diagonal 453 bis, 2º-1ª,
08036 Barcelona,
Spain
SMS Gateway. End user phone number. EU/EEA SignatureID
Mailchimp EU372008134 c/o The Rocket Science Group, LLC,
675 Ponce De Leon Ave NE,
Suite 5000
GA 30308, Atlanta,
USA
Hosting of mail server for notification emails. End user email. USA SignatureID AES with OTP by Mail
Zet Solutions BV 95120386 Albert Einsteinweg 4,
8218NH Lelystad,
Netherlands
Onboarding of We-ID business customers and users through manual and/or online identification and validation.
Maintaining the authentication service and mandate registry for We-ID.
End user personal data, as defined in the DPA Appendix Checklist. EU/EEA We-ID

# List of sub-suppliers that do not process personal data

Sub-suppliers that do not process personal data5
Business name Company registration number Address Service Hosting location
Mongo DB 499992 Building 2 Number One Ballsbridge,
Shelbourne Rd,
Ballsbridge, Dublin 4,
D04 Y3X9,
Ireland
Managed database. Signicat-managed Google Cloud
(EU/EEA)
Orange Business Digital Norway NO982211743 Lørenfaret 1E,
0585 Oslo,
Norway
Dedicated stack hosted for Qualified timestamping based on hash-values. EU/EEA
SK ID Solutions AS EE10747013 Pärnu mnt 141,
11314 Tallinn,
Estonia
Qualified timestamping based on hash-values. EU/EEA

1 Support: Follows the sun for the product Riskflow Orchestration only.
2 Support: Follows the sun for the products Mint and Electronic Signature API.
3 Only for a specific API for Electronic Signature API.
4 Support: Follows the sun for Amazon Web Services.
5 Critical suppliers as defined by DORA and EBA Guidelines.