Subcontractors

List of subcontractors used by the Data Processor

Subcontractors

Any use of a subcontractor is prerequisite to Data Controllers prior written consent.

Any agreement with a subcontractor shall be in writing, and the Data Processor shall beforehand

have verified that the subcontractor fulfils all security measures to the same level as Data

Processor. A subcontractor may only process data in accordance with the instructions given by

the Data Controller. Scandiatransplant collaborates with Central Region Denmark IT for hosting

environment.

Subcontractor	Description [2FA-app]	Type (Confidentiality)	Classification	Written contract
https://www.one.com/ (scandiatx.org)	DNS [Google auth.]	Public	3
pil.dk (scandiatransplant.org)	DNS. Scandiatransplant homepage [FreeOTP]	Public	3
linkmobility.dk	SMS service to tx coordinators (backup)	Internal information	5
inmobile.dk	SMS service to tx coordinators	Internal information	4	Version 4.3
browserstack.com	Internal test of web browsers on test data	Public	5
tideo.dk	Hosting homepage	Internal information	4
ScanNet	Mail service	Confidential	3	Agreement
RegionMidt IT	Production and test servers, mail, network and Backup	Restricted	1	Yes, SLA from Nov. 2021

Type (Confidentiality):
Restricted, highly sensitive
Confidential, intermediate sensitive
Internal information, not meant for public disclosure
Public, data that must be freely distributed to the public

Classification:
1: Catastrophic, highly sensitive data, if compromised it will have organizational and legal consequences
2: Major, if compromise it could mean critical loss in productivity and reputation
3: Moderate, minor reduced productivity
4: Minor, minimal impact in the ability to deliver services
5: Insignificant, no effect

Navigation