We would like to inform you of a planned migration of TQM Enterprise to Amazon Web Services (AWS).
The migration is scheduled to take place during the period June 19–30, and is part of our efforts to establish a more modern, scalable, and robust platform.
As previously communicated, this involves transitioning to a new sub-processor, where Amazon Web Services (AWS) will serve as our service delivery platform.
The migration itself will be carried out during evenings and weekends to minimize the impact on daily operations. However, some downtime should still be expected in connection with the migration.
We will provide more detailed information regarding exact timing and expected downtime as soon as this has been finalized.
Please feel free to contact us if you have any questions in the meantime.
Questions and Answers
In situations like this, questions may arise regarding the process.
Below are our responses:
1. Where is the data physically stored?
AWS operates data centers in multiple geographic regions worldwide. An AWS Region consists of several physically separate data centers (known as Availability Zones) located within the same geographic area.
For TQM Enterprise, data will be stored within the selected European region (AWS region = eu-west-1, Ireland), and the data remains within this region.
This means:
- Data is stored in data centers within the EU/EEA
- Data is not transferred خارج the region without control or agreement
2. How are secure storage and operations ensured?
AWS is one of the world’s leading providers of cloud infrastructure and meets extensive security and compliance requirements.
Examples include:
- Certifications such as ISO 27001, ISO 27017, ISO 27018, and SOC 1/2/3
- Continuous audits by independent third-party auditors
- Strict technical controls ensuring that even AWS personnel do not have access to customer data
In addition, the shared responsibility model applies:
- AWS is responsible for physical security, infrastructure, and operation of data centers
- 4human is responsible for the application, access control, and data processing
3. What does this mean for the Data Processing Agreement (DPA)?
AWS acts as a subcontractor (sub-processor) for infrastructure.
Important clarification:
- AWS provides its own GDPR-compliant Data Processing Agreement (DPA), which automatically applies when using their services
- AWS acts as a data processor on behalf of 4human
For you as a customer, this means:
- Your existing Data Processing Agreement with 4human remains in effect
- AWS is included as a sub-processor within the scope of this agreement
- AWS is contractually obligated to comply with GDPR requirements
4. Is a new Data Processing Agreement required?
We have previously notified our customers about new sub-processors. Therefore, no new agreement needs to be signed.
The changes, communicated on October 30, 2025, are as follows:
| Supplier | Location | Services | Comments |
| Google Cloud | Googles data centres in Western Europe. |
Push notifications in the new TQM APP. This service will replace OneSignal in the new mobile app. |
Google Cloud's software Firebase Cloud Messaging sends push notifications to users' mobile apps. The push notifications contain the ID of the users' mobile phones. The push notifications are not stored on Google Cloud's servers, but they pass through the servers, and this is defined as processing. Firebase Cloud Messaging is ISO 27001, SOC 1, SOC 2, and SOC 3 certified. |
| HERE Global B.V. | Kennedyplein 222 -226 5611 ZT Eindhoven The Netherlands (EU) |
Map services |
https://legal.here.com/en-gb/privacy
|
| AWS (Amazon Web Services) | Amazon Web Services EMEA SARL Dublin, Ireland (EU) | Hosting provider. Operational services, backup, servers, and infrastructure. |
ISO27001, ISO27017, ISO27018, ISO27701, ISO22301 and ISO9001 certified. |
| 4human HRM AS | Stensarmen 16, 3112 Tønsberg (EU) | Development, testing, hosting, and support | The parent company of 4human TQM AS |
| 4human QM365 AS | Ruseløkkveien 14, 0215 Oslo (EU) | Support, development | Sister company of 4human TQM AS |