Your travellers’ data.Handled properly.

Travel data is personal. Here you can see where data is kept, who processes it and who is responsible.

The route your data takes

Hosting in the EU
The platform runs on Google Cloud and Firebase with server functions in the europe-west1 region.
Encryption
Data is encrypted in transit with HTTPS and stored encrypted at Google Cloud.
Access control
Access is controlled with logins and roles, so admins, guides and travellers only see what they should.
AI with a person behind it
Trip Builder uses AI, runs in the EU, only writes drafts, and a member of your team always approves the result.

The travel company is the controller
For traveller data in the app, your company is the data controller and BackPack is the data processor.
Data processing agreement
The relationship is governed by our data processing agreement, which you can read in full.
Security incidents
We notify you without undue delay of any personal data breach. Security enquiries: kontakt@backpack-app.dk.

Want to hear about changes to this list? Write to kontakt@backpack-app.dk and we’ll add you.

Name	Service	Location	Transfer basis
Google Ireland Ltd. / Google LLC	Firebase, Cloud Functions, data storage and notifications	EU (europe-west1)	EU-US Data Privacy Framework and SCCs for any transfer
Google Ireland Ltd. / Google LLC	Vertex AI (Gemini) for Trip Builder	EU (europe-west4, the Netherlands)	EU-US Data Privacy Framework and SCCs for any transfer
Resend, Inc.	Sending system emails	USA	Standard contractual clauses (SCCs)
one.com (Group.one)	Domain email for customer contact	EU	No third-country transfer

Book a demo and get a proposal that fits your trips.