This page gives the information that Sluicio AB, as a provider of data processing services, publishes under the EU Data Act (Regulation (EU) 2023/2854). It applies to Sluicio Cloud. Last updated: 6 November 2026.
1. Provider
Sluicio AB, reg. no. 559610-5709, Guldsmedsvägen 12, 653 46 Karlstad, Sweden. Contact: legal@sluicio.com.
2. Jurisdiction of the infrastructure (Article 28(1)(a))
Sluicio Cloud is operated for Sluicio AB by ROMA IT AB, Sweden, on servers in data centres of Hetzner Online GmbH in Germany. Customer data, including back-ups, is stored only within the EU/EEA. All companies that operate or host the service are established in the EU and are subject to the law of the European Union and its member states. Notification e-mails are sent through AhaSend B.V., the Netherlands, which does not store message content.
3. Protection against international governmental access (Article 28(1)(b))
Sluicio takes the following measures to prevent international governmental access to, or transfer of, non-personal data held in the EU where this would conflict with EU or member-state law:
- Technical: data is stored and processed only in the EU/EEA; data is encrypted in transit over public networks; each customer has its own instance with separate databases; administrative access to production systems is restricted to authorised personnel and logged.
- Organisational: any request from a public authority is assessed before it is answered, and data is disclosed only where EU or member-state law requires it, or where an international agreement applicable under EU law provides for it. We disclose the minimum data needed and inform the customer before disclosure, unless the law prohibits this.
- Contractual: our customer agreement commits us to keep customer data in the EU/EEA. Our sub-processors are established in the EU and bound by data processing agreements with corresponding obligations.
4. Switching and data export
Customers can switch to another provider or to their own infrastructure, and export their data, in accordance with Section 18 and Appendix 3 of the Sluicio Software-as-a-Service Agreement. The exportable data, its formats and the applicable open standards (such as OpenTelemetry/OTLP, JSON and YAML) are described in Appendix 3 and in the export documentation in the customer portal, which is kept up to date.