Data processing agreement.

This applies when you use Minne for work. It's included for everyone, free, and needs no signature.

1. About this agreement

This agreement applies when a company or organisation (“you”) uses Minne in its business. You are the controller and Enpalm AB (“we”) is your processor. It follows Article 28 of the General Data Protection Regulation (GDPR) and applies from when you start using Minne. Want a signed copy? Email hej@useminne.com.

2. What we process

Purpose: recording, transcribing and summarising your meetings, recognising who speaks, and letting you search and export them.
Whose data: your users and the people in their meetings.
What data: name and email address for signing in, meeting audio, transcripts, summaries and notes, and voiceprints to recognise speakers. Voiceprints may be biometric data (Article 9).
For how long: as long as you use Minne.

3. Your instructions

We process the data only to provide Minne under this agreement and the choices you make in Minne. We tell you if we think an instruction breaks the GDPR. You're responsible for having a legal basis for the recordings, and for the people in a meeting knowing it's recorded.

4. Where the data is

Everything is stored in Stockholm, in the AWS region eu-north-1: audio, transcripts, summaries, a search index of the summaries, voiceprints, accounts and backups. Summaries are written by an AI model in Amazon Bedrock, which runs in AWS regions in the EU (Sweden, Germany, Ireland, France, Italy and Spain). There, data is processed only while the model works, and isn't stored. An organisation's admins may give its own systems keys that read what members share with it, and a member may connect an app of their choosing to their own Minne, such as Claude: those are the organisation's and the member's choices, and those systems and apps aren't Minne's sub-processors. Minne itself transfers nothing from your meetings to countries outside the EU.

5. Confidentiality

Only the people at Minne who need it to run Minne have access, and they're bound by confidentiality. We never read your meetings unless you ask us to, to help you.

6. Security

All traffic is encrypted, and data is encrypted where it's stored. Signing in needs no password. Each person's data is kept apart and reached only with their own sign-in, except meetings that person shares with their organisation. Permissions are as narrow as they can be. No meeting content goes into logs, and the AI model's workspace has no network and no permissions. Backups exist so nothing is lost by mistake.

7. Sub-processors

We use Amazon Web Services (AWS) for storage, computing, the AI model (Amazon Bedrock), sign-in and the emails with sign-in codes, in the regions above. No one else for anything to do with your meetings. Card payments are handled by Stripe, an independent controller of the card details, which never receives anything from your meetings. AWS has the same obligations to us as we have to you. We tell you at least 30 days before we add or change a sub-processor, so you can object or leave.

8. We help you

When someone wants to see, get or delete their data (export and deletion are right in Minne), with impact assessments, and with what you need to show this agreement is kept. You may audit us with reasonable notice.

9. Personal data breaches

We tell you without undue delay, and within 48 hours of finding a breach that concerns your data, with what we know and what we're doing about it.

10. When you leave

What you delete in Minne is gone at once, and from the backups within 35 days. Deleting your account does that for everything. Export first if you want to keep anything.

11. Other terms

Swedish law applies. If this agreement and other terms differ, this agreement prevails for personal data. We announce changes at least 30 days ahead.

Version 1 · 30 October 2026 · Enpalm AB, company no. 559460-3010