We have completed a comprehensive modernization of the platform to ensure improved performance, increased stability, and a solid foundation for future development. This work represents a significant technical upgrade, making the solution more robust, scalable, and better equipped to meet future needs—both functionally and in terms of security.
As part of this modernization initiative, we have also conducted a thorough assessment of our infrastructure and operational strategy. Based on this evaluation, we have decided not to proceed with a transition to AWS at this time. This allows us to avoid unnecessary complexity and risk associated with combining multiple major changes simultaneously, and instead prioritize stable delivery and faster value creation for our customers.
In the coming period, we will carry out a scheduled platform version upgrade. This update will also include a migration to a new and modernized server structure with our existing hosting provider. The new structure will provide improved performance, enhanced scalability, and increased operational reliability, while maintaining a familiar and stable operating platform. The final date, along with expected downtime, will be communicated once confirmed.
Looking ahead, we will continue to build on this foundation with ongoing improvements in functionality, user experience, and integrations. The modernization gives us greater flexibility to introduce new capabilities more rapidly and improves our ability to tailor the solution to customer needs. At the same time, we will continue to evaluate future infrastructure options, including cloud alternatives, based on maturity, requirements, and value for our customers.
Overall, this work establishes the basis for a more stable, future-oriented, and continuously improving platform.
Please feel free to contact us if you have any questions.
Questions and Answers
It is natural for questions to arise in connection with such changes.
Below are our clarifications:
1. Where is the data physically stored?
Data will continue to be stored with our existing hosting provider within the EU/EEA.
This means that:
- Data remains within the EU/EEA
- Data is handled in accordance with applicable data protection and security requirements
2. How are secure storage and operations ensured?
Our hosting provider complies with strict requirements for security, availability, and operations.
In practice, this includes:
- Modern security measures for infrastructure and network
- Continuous monitoring and operations
- Established procedures for access control and data protection
The division of responsibility is clearly defined:
- Hosting provider: physical infrastructure and platform operations
- 4human: application, access control, and data processing
3. What does this mean for the Data Processing Agreement (DPA)?
There are no changes to the existing Data Processing Agreement.
- The agreement with 4human remains unchanged
- Existing sub-processors continue within the current framework
- All processing is carried out in accordance with GDPR
4. Is data in TQM Enterprise encrypted?
Yes, data is encrypted both in transit and at rest.
- Data in transit uses TLS 1.2 or higher
- Data at rest is encrypted in accordance with current best practices
5. Will IP addresses change?
Yes, new IP addresses will be introduced as part of the upgrade.
- DNS addresses will not change
- We recommend using DNS instead of fixed IP addresses in configurations such as firewalls, integrations, and API access
6. Is a new Data Processing Agreement required?
No, there is no need to sign a new agreement.
- Existing agreements remain in effect
- The changes do not affect the contractual relationship
The changes that were communicated on October 30, 2025, are as follows:
| Supplier | Location | Services | Comments |
| Google Cloud | Googles data centres in Western Europe. |
Push notifications in the new TQM APP. This service will replace OneSignal in the new mobile app. |
Google Cloud's software Firebase Cloud Messaging sends push notifications to users' mobile apps. The push notifications contain the ID of the users' mobile phones. The push notifications are not stored on Google Cloud's servers, but they pass through the servers, and this is defined as processing. Firebase Cloud Messaging is ISO 27001, SOC 1, SOC 2, and SOC 3 certified. |
| HERE Global B.V. | Kennedyplein 222 -226 5611 ZT Eindhoven The Netherlands (EU) |
Map services |
https://legal.here.com/en-gb/privacy
|
| AWS (Amazon Web Services) | Amazon Web Services EMEA SARL Dublin, Ireland (EU) | Hosting provider. Operational services, backup, servers, and infrastructure. |
ISO27001, ISO27017, ISO27018, ISO27701, ISO22301 and ISO9001 certified. |
| 4human HRM AS | Stensarmen 16, 3112 Tønsberg (EU) | Development, testing, hosting, and support | The parent company of 4human TQM AS |
| 4human QM365 AS | Ruseløkkveien 14, 0215 Oslo (EU) | Support, development | Sister company of 4human TQM AS |