Last updated September 1, 2026
Subprocessors
The third-party providers Carnivore AS engages to operate Calendia, and the separate integrations that business customers connect under their own agreements.
1. About this list
This page lists the third-party providers ("subprocessors") that Carnivore AS, organisation number 824533342, engages to help operate the Calendia platform. We provide it for transparency. It does not form part of any contract, does not create or expand any right, representation, warranty, or service level, and does not change the allocation of responsibility set out in our Terms and Conditions and Privacy Policy, which control if there is any conflict.
A subprocessor is a provider Carnivore AS chooses to process personal data on our behalf when we act as a processor for a business customer, or that we use as part of running Calendia generally. The categories and providers below reflect our current setup and may change as the product, infrastructure, providers, regions, and pricing evolve. We are not required to use every provider listed for every customer, feature, plan, or region, and a provider may be used only for some functions.
Important: the integrations a business chooses to connect itself — such as payment terminals, payout providers, accounting and finance systems, and external calendars — are NOT Calendia subprocessors. They are covered in section 4 and are governed by the business customer own agreements with those providers.
2. Calendia infrastructure and platform subprocessors
These providers support the core Calendia service. They are engaged by Carnivore AS and operate under our agreements with them. A provider may process only limited data for a specific function, and availability can vary by region, plan, and configuration.
- Application hosting and infrastructure — Laravel Cloud (Laravel LLC), running on Amazon Web Services (Amazon.com, Inc.). Used to host the application, databases, queues, and background processing.
- Object storage, content delivery, and network security — Cloudflare, Inc. Used for file and image storage (including uploaded files and, where enabled, journal records), content delivery, DNS, and bot and abuse protection (Turnstile).
- Transactional email delivery — the configured email provider, which may be Postmark, Resend, or Amazon SES. Used to deliver account, booking, payment, security, and other operational emails.
- SMS and messaging delivery — Twilio Inc. (SMS and WhatsApp) and Sp247 / LINK Mobility (SMS). Used to deliver reminders, notifications, and business-configured messages where those channels are enabled.
- Subscription billing and affiliate payouts — Stripe, Inc. Used to bill Calendia subscriptions, manage the customer billing relationship with Carnivore AS, and pay out affiliate commissions where the affiliate program is used.
- Automated translation — OpenAI, L.L.C. Used to translate certain interface, disclaimer, and consent text. Not used to deliver the underlying booked service.
- Video consultations — LiveKit, Inc. Used for real-time audio and video sessions where the video consultation feature is enabled.
- Authentication — Google LLC. Used where a user chooses to sign in with Google.
- Product analytics and internal operations — Hotjar Ltd. (usage analytics on Calendia surfaces) and Slack Technologies, LLC (internal operational alerts to Carnivore AS staff).
- AI voice receptionist telephony — DIDWW. Used to provision and carry inbound phone numbers for businesses that enable the Calendia AI voice receptionist, where Calendia manages the number on the business behalf.
- AI voice receptionist agent — ElevenLabs. Used to answer, transcribe, and hold a conversation with callers to a business Calendia number, and to trigger the resulting booking actions, where the AI voice receptionist feature is enabled.
- National eID identity verification — Idura (formerly Criipto). Used to broker national electronic ID logins (such as Norwegian BankID, Swedish BankID, and Danish MitID) where a business enables identity verification.
- Calendia Pay card acquiring — Surfboard Payments AB. Used to process and settle card payments for businesses that activate Calendia Pay; see section 4 for other card and terminal providers a business may instead connect on its own.
- Provider mobile app push notifications — Expo. Used to deliver push notifications to the Calendia provider mobile app.
- Physical gift card print and fulfilment — Cloudprinter. Used to print and ship physical gift cards that a business orders through Calendia.
3. Data location and international transfers
Our subprocessors may process data in the European Economic Area, the United Kingdom, the United States, or other countries, depending on the provider, region, and configuration. Where personal data is transferred across borders and the law requires it, we rely on appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms.
We do not warrant that any particular provider, data centre, region, or transfer mechanism will remain in place. A provider may add, remove, or change its own sub-processors, regions, and infrastructure at any time.
4. Integrations the business connects (not Calendia subprocessors)
Calendia lets a business connect external services using the business own account, credentials, approvals, and contracts. When a business activates one of these, the business is choosing to share its own and its customers data with that provider. These providers are independent controllers or the business own processors, not subprocessors of Carnivore AS. Calendia only transmits the data the business directs as part of operating the connection, and the business own agreement and the provider terms govern that processing.
- Payments, terminals, and payouts — for example Stripe Connect, Vipps MobilePay, Swish, Bizum, SumUp, Worldline, Nexi SmartPOS, Nexi POS, Nets, Viva, and PayPal (Braintree and Zettle). The business contracts directly with the payment provider, completes its own onboarding and KYC, and is responsible for fees, settlement, disputes, chargebacks, and compliance.
- Accounting, invoicing, and finance — for example Tripletex, Fiken, Fortnox, Visma eAccounting, e-conomic, DNB Regnskap, Intuit QuickBooks, Holded, Contasimple, Anfix, Sage Active, and A3 Innuva (Wolters Kluwer). The business connects and authorises these and is responsible for the accuracy of synced accounting, tax, payroll, and finance records.
- Calendar synchronisation — for example Google Calendar and Microsoft 365 / Outlook. The business connects its own calendar account.
- Other business-connected services — any additional account, channel, or third-party service a business links to its workspace, including business-operated messaging connections.
5. Disclaimer and limitation of liability
To the maximum extent permitted by law, this list is provided "as is" and "as available" for information only. We make no warranty that it is complete, current, or error-free, and we are not liable for any reliance placed on it.
To the maximum extent permitted by law, Carnivore AS is not responsible or liable for the acts, omissions, downtime, data handling, security incidents, pricing, terms, or compliance of any subprocessor, third-party provider, or business-connected integration. Any liability of Carnivore AS relating to Calendia, including anything connected to this list, remains subject to the disclaimers, exclusions, and limitations of liability in our Terms and Conditions.
Each business customer is responsible for assessing whether the providers and data flows described here are appropriate for its own legal, privacy, security, accounting, tax, employment, and regulatory obligations, and for entering any data processing agreement required for its use of Calendia.
6. Changes and contact
We may update this list at any time to reflect changes in providers, infrastructure, regions, features, or law. The current version is the version posted on this page, and the effective date above shows when it was last updated. We are not obliged to give individual advance notice of a change unless a separate written agreement requires it.
Questions about this list can be sent to Carnivore AS at [email protected].