Rise Financial Group AG
Registration number: CHE-276.208.367
Last updated: 21 September 2026
This page applies across the Rise group — Rise Financial Group AG and every company under it, including Rise Technologies Oy, which operates the Rise platform and provides the accounting service.
When Rise processes your data, we rely on a small number of trusted service providers. This page lists them, what they do, and where your data is processed — the subprocessors of the Rise service first, then the providers we use to run our own business and website.
We keep this list short on purpose. Fewer providers means fewer places your data can go.
A subprocessor is a company that processes your personal data on our behalf, under our instructions, as part of delivering the Rise service. Under the GDPR you are the controller of that data and we are the processor — so you have the right to know who else touches it.
Your service agreement is with the group company that provides your service — currently Rise Technologies Oy. This page covers the subprocessors that company relies on, including other companies within the Rise group.
The first table lists the subprocessors of the Rise service. The second lists providers we use to run our own business and marketing website, where Rise is the controller rather than your processor — none of them receive your accounting data. We list both, because we would rather you see the whole picture.
These providers process customer data on your behalf under our Data Processing Agreement.
| Subprocessor | Service | Processing location | Transfer basis |
|---|---|---|---|
| Amazon Web Services EMEA SARL (Luxembourg) | Cloud infrastructure, hosting of the Rise platform, AI inference via Amazon Bedrock, and transactional email delivery (Amazon SES) | Frankfurt, Germany (eu-central-1) | EU/EEA. Where AWS support staff may access data from outside the EEA, the AWS Data Processing Addendum and EU Standard Contractual Clauses apply. |
| Stream — the chat platform at getstream.io, operated by Stream.io, Inc. | In-app messaging between you and your accountant — message content, attachments, and user identifiers | EU region. The company is incorporated in the United States; our application is configured to the EU region. | Standard Contractual Clauses. Stream's own subprocessors are published at getstream.io/legal/subprocessors |
| Netbox Finland Oy | E-invoicing operator — sending and receiving e-invoices in Finland. Bank connectivity via Finnish banks' web services (WS) — retrieving bank statements and transmitting payment material. | Finland | EU/EEA |
| Enable Banking Oy | Bank connectivity via PSD2 interfaces — retrieving account information and initiating payments | Finland | EU/EEA |
| Sum and Substance Ltd (Sumsub, company no. 09688671) | Identity verification — checking identity documents and a facial image for liveness confirmation when your authorised representatives sign the service agreement | Germany — Sumsub stores and processes all personal data on designated servers in European data centres | Data remains in the EU. The contracting entity is registered in the United Kingdom, covered by the European Commission's adequacy decision. |
| Oneflow AB | Electronic signing of the service agreement and related documents | Sweden | EU/EEA |
| Google Ireland Limited (Firebase Cloud Messaging) | Push notifications to the Rise mobile app — device tokens and notification content | European Union, with processing by Google LLC | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Apple Inc. (Apple Push Notification service) | Push notifications to the Rise iOS app — device tokens and notification content | United States | Standard Contractual Clauses |
| Slack Technologies (Salesforce) | Shared communication channel with your Rise team. Being phased out — replaced by in-app messaging. | United States | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Notion Labs, Inc. | Internal working records, including supplier listings prepared during onboarding | United States | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Rise Financial Group AG | Group-level administration: data protection governance, service development, group reporting | Stans, Switzerland | European Commission adequacy decision for Switzerland |
<aside> ℹ️
Subprocessors of our subprocessors. Several of the providers above use their own subprocessors, and they publish their own lists — Stream at getstream.io/legal/subprocessors, AWS at aws.amazon.com/compliance/sub-processors. We review these lists as part of our own change notifications to you.
</aside>
Rise can read accounting material directly from systems you already use, so that you do not have to forward it manually. You decide which sources to connect, based on how your business actually works.