Legal

    Sub-processors

    This page lists the current sub-processors Dimmi uses to deliver the service. It is fetched live from our API so it is always up to date.

    Loading…

    Core sub-processors

    These providers are engaged for all clients and all production environments.

    Client-activated integrations

    These providers process personal data only where a client configures the integration in its own environment. Until a client activates an integration, the provider is not a sub-processor for that client. The integrations active for your organisation are listed in your Client Portal. Additions to this catalogue are announced here with 30 days' notice, in the same way as core sub-processors.

    Dimmi maintains this catalogue so that integrations can be enabled quickly when a client asks for one. Listing a provider here does not mean Dimmi processes your data through it.

    Delivery partners

    Dimmi delivers services outside Denmark, and certain services within Denmark, through vetted delivery partners engaged per case. A partner receives only the data necessary for the specific case it is engaged on. The partner engaged on each of your cases is named in your Client Portal against that case.

    Every delivery partner is bound by Dimmi's Network Partner Agreement, whose data processing appendix mirrors our own DPA: processing on documented instructions only, confidentiality and need-to-know access, security measures equivalent to ours, no use of case data for the partner's own purposes, marketing or AI training, breach notification to Dimmi within 24 hours, erasure or return within 60 days of case completion, audit rights, and EU Standard Contractual Clauses where the partner sits in a third country without an adequacy decision.

    Where professional rules require a partner — typically a law firm — to be engaged directly by you or by the individual concerned, that partner acts as an independent controller rather than as our sub-processor. We tell you when that is the case.

    We do not publish a public list of named delivery partners. The partner engaged on each of your cases is named in your Client Portal against that case, and we will provide the current list of partners covering your markets on request — write to info@dimmi.dk.

    Transfer Impact Assessments

    Some of the sub-processors listed above process personal data outside the EU/EEA. For every such transfer, Dimmi has carried out a documented Transfer Impact Assessment (TIA) in line with the EDPB Recommendations 01/2020. Each TIA covers the legal framework of the destination country, the categories of data involved, the transfer mechanism (EU Standard Contractual Clauses or an adequacy decision), and the supplementary technical and organisational measures we apply.

    TIAs are reviewed at least annually, and whenever a transfer changes materially — for example when a core sub-processor is added or replaced, which we announce on this page with 30 days' notice.

    The full TIA package is available to our customers and their advisors on request. Contact info@dimmi.dk.

    Request the full TIA package