Subverwerkers
Derde partijen die gegevens verwerken namens Fronterio.
We schakelen de onderstaande subverwerkers in om het platform te leveren. Materiële wijzigingen worden ten minste 30 dagen van tevoren aan organisatie-eigenaren gemeld.
Connecting Microsoft 365?
Microsoft tenant integrations (Copilot tracker, SharePoint sync, Teams agent, Copilot Studio, Azure AI Foundry) are not Fronterio sub-processors. They are your own tenant. For a per-integration view of what Fronterio reads, writes, and never accesses, see the Microsoft data access overview.
View Microsoft data access overview →- Doel
- Primary database, authentication, file storage.
- Verwerkte gegevens
- Account data, organisation data, uploaded files.
- Verwerkingsregio
- EU (Frankfurt, eu-central-1)
- Overdrachtsmechanisme
- Processing within EU
- Doel
- Application hosting and serverless function execution.
- Verwerkte gegevens
- Request metadata (no persistent PII storage).
- Verwerkingsregio
- EU (Stockholm, arn1)
- Overdrachtsmechanisme
- Processing within EU
- Doel
- AI model inference for the AI Consultant, assessment scoring and generated reports, for organisations subscribing via Microsoft Marketplace. The same models as the direct provider, hosted on Azure in the EU (Sweden Central).
- Verwerkte gegevens
- Organisation-level context, anonymised conversation content, assessment dimension scores
- Verwerkingsregio
- EU (Sweden Central)
- Overdrachtsmechanisme
- EU-US Data Privacy Framework + Standard Contractual Clauses
- Doel
- AI model inference for the AI Consultant, assessments and generated reports.
- Verwerkte gegevens
- Org-level aggregated context (never PII), conversation content submitted by the user.
- Verwerkingsregio
- US
- Overdrachtsmechanisme
- EU Standard Contractual Clauses (SCCs) + EU-US Data Privacy Framework
- Doel
- Subscription billing, payment processing, tax calculation.
- Verwerkte gegevens
- Billing contact, card token (never card number), invoice metadata.
- Verwerkingsregio
- EU (Ireland) with global processing
- Overdrachtsmechanisme
- EU SCCs
- Doel
- Transactional and lifecycle email delivery.
- Verwerkte gegevens
- Recipient email, email subject/body content.
- Verwerkingsregio
- US
- Overdrachtsmechanisme
- EU SCCs
- Doel
- Server-side product analytics events (event names + anonymous properties only).
- Verwerkte gegevens
- Event names, org-level properties, no PII.
- Verwerkingsregio
- EU (eu.posthog.com)
- Overdrachtsmechanisme
- Processing within EU
- Doel
- Error tracking and performance monitoring.
- Verwerkte gegevens
- Error stack traces, breadcrumbs, user id (if logged in).
- Verwerkingsregio
- EU (de.sentry.io)
- Overdrachtsmechanisme
- Processing within EU
- Doel
- Distributed rate limiting and request counters.
- Verwerkte gegevens
- Rate-limit keys (no PII), counters.
- Verwerkingsregio
- EU
- Overdrachtsmechanisme
- Processing within EU
- Doel
- Read sensitivity-label metadata from the customer's own M365 tenant via Microsoft Graph (informationProtection/policy/labels) so the EU AI Act risk classifier can elevate tiers when high-confidentiality data is in scope.
- Verwerkte gegevens
- Sensitivity-label IDs, names, and confidentiality levels. Never document or message contents. Never DLP rule details.
- Verwerkingsregio
- Customer M365 tenant region (typically EU)
- Overdrachtsmechanisme
- Processing executes within the customer's tenant; Microsoft acts as the customer's own data processor under the customer's existing M365 DPA.
Bezwaar maken tegen een subverwerker
U hebt het recht om bezwaar te maken tegen een wijziging van subverwerker. Neem contact op met onze functionaris voor gegevensbescherming binnen de bezwaarperiode.