Companies / Penneo / Subprocessors
Penneo provides digital signing, data collection, and identity verification with cryptographic evidence and EU-native infrastructure. It serves businesses across Europe, including audit and accounting, finance and banking, legal services, real estate, and administration and HR.
Summarized from its homepage on 4 Nov 2026.
Gærtorvet 1-5, København V, Capital Region of Denmark, 1799, DK
Subprocessors of Penneo
Penneo declares 5 subprocessors.
| Subprocessor | Purpose |
|---|---|
| Storing and hosting Database, Incoming data processing requests, Sandbox and development environment, Production Environment. The contents of all signed documents is encrypted, and not accessible to subprocessor. | |
| Monitoring user behavior in the Penneo Sign application, in relation to usage of the platforms, signer activity, casefile progress and completion status. | |
| Co-location data center. Provides housing for Penneo’s own hardware security modules and other self-managed devices. | |
| ONLINECITY.IO Aps | Used to send out one-time codes via SMS. Only applicable as a subprocessor if an administrator has actively enabled the feature in the account settings. |
| Used to manage customer support tickets, including the logging, tracking, and resolution of support requests via various channels. |
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| ISO 27001Company's statement | “ISO 27001 .”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Penneo lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Penneo's full stack
Every vendor with its source and date, and an alert when Penneo adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call