Subprocessors
Last updated
We use a small number of third parties to run ByteBill. Each processes personal data only on our instructions, under a data processing agreement.
This page is here because businesses evaluating a supplier are entitled to know who else ends up handling their data. We keep it current and list changes below.
Infrastructure
| Subprocessor | What it does | Where |
|---|---|---|
| Amazon Web Services | Hosting, storage, database, sign-in and email (sending and receiving) for the European environment | Stockholm, Sweden (eu-north-1) |
| Microsoft Azure | Disaster-recovery copies of the European environment's files and database | Norway East, Norway |
The UAE environment is not open yet. When it opens, it will run on Microsoft Azure in the UAE, and this page will be updated first.
Identity and messaging
| Subprocessor | What it does | Where |
|---|---|---|
| Sveve | Delivers one-time sign-in codes to your phone by SMS | Norway |
Email is sent and received through Amazon Web Services (listed above).
To verify your identity with BankID and confirm your authority to act for an organisation, we use ID-porten and Altinn, public services run by Digitaliseringsdirektoratet (the Norwegian Digitalisation Agency). They operate under their own terms as a public authority, not as our processor.
Invoice network
| Subprocessor | What it does | Where |
|---|---|---|
| Qvalia | Our PEPPOL access point. Receives the invoices suppliers send you, and transmits the invoices you issue, on your behalf | Sweden (EU) |
An access point is the regulated gateway onto the PEPPOL network — you cannot exchange PEPPOL invoices without one. Invoice content necessarily passes through it in both directions: supplier invoices addressed to your organisation, and invoices you issue to your customers.
Our own operations
Support email is received and stored on our own Amazon Web Services infrastructure (listed above); we use no separate support or ticketing service. Our servers record errors in their own logs on Amazon Web Services (listed above), kept for up to 2 years. We use no third-party crash-reporting or error-monitoring service, and the app itself sends no crash reports.
Website
This site is static, hosted on AWS Amplify, and carries no analytics or advertising. The support form posts to our own infrastructure. See the cookie policy.
Video guides, where embedded, load from YouTube or Vimeo — and only after you press play. Nothing is requested from them until you do.
Changes to this list
We update this page when a subprocessor is added or removed. If you have a data processing agreement with us that requires advance notice of changes, write to support@bytebill.no to be added to the notification list.
| Date | Change |
|---|---|
| 2026-08-06 | Initial publication. Qvalia named as our PEPPOL access point. |