Lista över underleverantörer

Senast uppdaterad: juni 2026

Coursfy använder följande underleverantörer. Listan ingår i vårt personuppgiftsbiträdesavtal (DPA).

Ändringar

Vi meddelar kunder om väsentliga ändringar enligt DPA.

30 dagars förhandsbesked vid nya underleverantörer
Uppdaterad lista publiceras på denna sida

Leverantör	Syfte	Datalagring	Värdregion	Skyddsåtgärder
MongoDB Atlas	Primary application database (user profiles, academies, courses, transactions)	EU/EES — primary production data residency	eu-central-1 (Frankfurt), eu-north-1 (Stockholm) — per deployment appendix	MongoDB DPA; encryption at rest (AES-256) and TLS in transit; SCCs where applicable
Amazon Web Services (Amplify, S3, CloudFront)	Frontend hosting, media storage, CDN, backups	EU/EES — production when configured for EU residency	eu-north-1 (Stockholm), eu-central-1 (Frankfurt)	AWS DPA; SSE for S3; TLS in transit; IAM least-privilege
Stripe	Payments, subscriptions, Stripe Connect creator payouts	EU/US — Stripe Ireland Ltd for EU merchants where applicable	EU (Ireland) + US processing for fraud/radar; configurable per merchant	Stripe DPA; PCI DSS; no full card numbers stored on Coursfy servers
WorkOS	Enterprise SSO (SAML/OIDC), directory sync, federated login for academies	US/EU — identity metadata and SSO session broker	US East (Virginia), US West (Oregon); EU residency available on Enterprise plan	WorkOS DPA + SCCs; minimal PII (email, name, IdP subject id); academy-scoped connections
SendGrid (Twilio)	Transactional email (verification, password reset, notifications)	EU/US — message routing per Twilio/SendGrid region configuration	EU (Ireland) preferred for EU deployments; US fallback with SCCs	Twilio/SendGrid DPA; purpose-limited templates; TLS in transit
Sentry (optional)	Error monitoring when analytics consent is granted	EU/US — EU data residency on Business plan (de.sentry.io)	EU (Frankfurt) when enabled; otherwise US with SCCs	PII scrubbing via scrubSentryEvent; consent-gated client load
OpenAI (optional)	AI course builder, tutor, and academy assistant when platform or BYOAI keys are used	US — API processing for prompts and completions	US (api.openai.com); no persistent user profile storage by OpenAI under API terms	OpenAI DPA + SCCs; prompts minimized; academy BYOAI keys stay controller-scoped
Upstash (optional)	Redis cache, rate limits, subdomain resolution KV	EU/EES when EU region selected	eu-central-1, eu-west-1 — per Upstash database region	Upstash DPA; TLS; TTL-bound keys; no long-term PII in cache

Lista över underleverantörer

Senast uppdaterad: juni 2026

Coursfy använder följande underleverantörer. Listan ingår i vårt personuppgiftsbiträdesavtal (DPA).

Ändringar

Vi meddelar kunder om väsentliga ändringar enligt DPA.

30 dagars förhandsbesked vid nya underleverantörer
Uppdaterad lista publiceras på denna sida

Leverantör	Syfte	Datalagring	Värdregion	Skyddsåtgärder
MongoDB Atlas	Primary application database (user profiles, academies, courses, transactions)	EU/EES — primary production data residency	eu-central-1 (Frankfurt), eu-north-1 (Stockholm) — per deployment appendix	MongoDB DPA; encryption at rest (AES-256) and TLS in transit; SCCs where applicable
Amazon Web Services (Amplify, S3, CloudFront)	Frontend hosting, media storage, CDN, backups	EU/EES — production when configured for EU residency	eu-north-1 (Stockholm), eu-central-1 (Frankfurt)	AWS DPA; SSE for S3; TLS in transit; IAM least-privilege
Stripe	Payments, subscriptions, Stripe Connect creator payouts	EU/US — Stripe Ireland Ltd for EU merchants where applicable	EU (Ireland) + US processing for fraud/radar; configurable per merchant	Stripe DPA; PCI DSS; no full card numbers stored on Coursfy servers
WorkOS	Enterprise SSO (SAML/OIDC), directory sync, federated login for academies	US/EU — identity metadata and SSO session broker	US East (Virginia), US West (Oregon); EU residency available on Enterprise plan	WorkOS DPA + SCCs; minimal PII (email, name, IdP subject id); academy-scoped connections
SendGrid (Twilio)	Transactional email (verification, password reset, notifications)	EU/US — message routing per Twilio/SendGrid region configuration	EU (Ireland) preferred for EU deployments; US fallback with SCCs	Twilio/SendGrid DPA; purpose-limited templates; TLS in transit
Sentry (optional)	Error monitoring when analytics consent is granted	EU/US — EU data residency on Business plan (de.sentry.io)	EU (Frankfurt) when enabled; otherwise US with SCCs	PII scrubbing via scrubSentryEvent; consent-gated client load
OpenAI (optional)	AI course builder, tutor, and academy assistant when platform or BYOAI keys are used	US — API processing for prompts and completions	US (api.openai.com); no persistent user profile storage by OpenAI under API terms	OpenAI DPA + SCCs; prompts minimized; academy BYOAI keys stay controller-scoped
Upstash (optional)	Redis cache, rate limits, subdomain resolution KV	EU/EES when EU region selected	eu-central-1, eu-west-1 — per Upstash database region	Upstash DPA; TLS; TTL-bound keys; no long-term PII in cache

Lista över underleverantörer

Senast uppdaterad: juni 2026

Coursfy använder följande underleverantörer. Listan ingår i vårt personuppgiftsbiträdesavtal (DPA).

Ändringar

Vi meddelar kunder om väsentliga ändringar enligt DPA.

30 dagars förhandsbesked vid nya underleverantörer
Uppdaterad lista publiceras på denna sida

Leverantör	Syfte	Datalagring	Värdregion	Skyddsåtgärder
MongoDB Atlas	Primary application database (user profiles, academies, courses, transactions)	EU/EES — primary production data residency	eu-central-1 (Frankfurt), eu-north-1 (Stockholm) — per deployment appendix	MongoDB DPA; encryption at rest (AES-256) and TLS in transit; SCCs where applicable
Amazon Web Services (Amplify, S3, CloudFront)	Frontend hosting, media storage, CDN, backups	EU/EES — production when configured for EU residency	eu-north-1 (Stockholm), eu-central-1 (Frankfurt)	AWS DPA; SSE for S3; TLS in transit; IAM least-privilege
Stripe	Payments, subscriptions, Stripe Connect creator payouts	EU/US — Stripe Ireland Ltd for EU merchants where applicable	EU (Ireland) + US processing for fraud/radar; configurable per merchant	Stripe DPA; PCI DSS; no full card numbers stored on Coursfy servers
WorkOS	Enterprise SSO (SAML/OIDC), directory sync, federated login for academies	US/EU — identity metadata and SSO session broker	US East (Virginia), US West (Oregon); EU residency available on Enterprise plan	WorkOS DPA + SCCs; minimal PII (email, name, IdP subject id); academy-scoped connections
SendGrid (Twilio)	Transactional email (verification, password reset, notifications)	EU/US — message routing per Twilio/SendGrid region configuration	EU (Ireland) preferred for EU deployments; US fallback with SCCs	Twilio/SendGrid DPA; purpose-limited templates; TLS in transit
Sentry (optional)	Error monitoring when analytics consent is granted	EU/US — EU data residency on Business plan (de.sentry.io)	EU (Frankfurt) when enabled; otherwise US with SCCs	PII scrubbing via scrubSentryEvent; consent-gated client load
OpenAI (optional)	AI course builder, tutor, and academy assistant when platform or BYOAI keys are used	US — API processing for prompts and completions	US (api.openai.com); no persistent user profile storage by OpenAI under API terms	OpenAI DPA + SCCs; prompts minimized; academy BYOAI keys stay controller-scoped
Upstash (optional)	Redis cache, rate limits, subdomain resolution KV	EU/EES when EU region selected	eu-central-1, eu-west-1 — per Upstash database region	Upstash DPA; TLS; TTL-bound keys; no long-term PII in cache