Data Processing

Grant Thornton’s role as data controller and data processor

Grant Thornton acts as both a data controller and a data processor for the services listed below.

Services

Service Data Controller Data Processor
Preparation of financial statements with opinion
Other attestation work
Tax reporting
Bookkeeping
Payroll administration
Advisory services
Whistleblower scheme (customers)

 

On this page you can get an overview of Grant Thornton’s current sub-processors, which we use in our role as a data processor for our clients (the data controller).

 

Overview of sub-processors

When Grant Thornton performs bookkeeping or payroll administration services, we act as a data processor.

Below you will find updated overviews of our current sub-processors:

Bookkeeping

Name CVR number Address Description of processing
Billy ApS
33239106
Vesterbrogade 1C, 6., 1620 København V
If the customer uses Billy for bookkeeping, this subcontractor is used.
CorpayOne ApS
37231525
Bygmestervej 5, st. th, 2400 København
If the customer uses Corpay One for payment and document management, this subcontractor is used.
CWI Denmark ApS (Caseware)
42839213
Ny Carlsberg Vej 80, 1799 København V
Platform with digital solution for accounting and auditing
Digisense A/S
32082378
Viengevej 100 8240 Risskov
If the customer uses Digisense document management and creditor management, this subcontractor is used.
Kontolink ApS
39638827
Langebrogade 4 1411 København
If the customer uses Kontolink for document management, this sub-address is used.
Likvido Drift ApS
43555391
Gærtorvet 3 1799 København V Denmark
If the customer uses Likvido for debtor management, this subcontractor is used.
Microsoft Danmark ApS
13612870
Kanalvej 7, 2800 Kongens Lyngby
Microsoft Office365 and Teams
Minuba ApS
33259336
Hollandsvej 12, 2. sal 2800 Kgs. Lyngby
If the customer uses Minuba for order management, this subcontractor is used.
Officebot ApS
 41003863
Lyshøjen 2 (Bygning K4,1.tv) 8520 Lystrup
If the customer uses Officebot to automate their accounting, this subcontractor is used.
OnlinePOS A/S
33037945
Danmark Alsikevej 31 8920 Randers NV
If the customer uses OnlinePOS as a cash register system, this subcontractor is used.
Ordrestyring ApS
33859724
Lyngbyvej 20, 2. mf. 2100 København Ø
If the customer uses Minuba for order management, this subcontractor is used.
Pleo Financial Services A/S
39155435
Ravnsborg Tværgade 5C 2200 København N
If the customer uses Pleo for payment expense management, this subcontractor is used.
Storebuddy ApS
35663703
Nørregade 28D 1165 København K
If the customer uses Storebuddy for accounting, this subcontractor is used.
Visma e-Conomic A/S
29403473
Gærtorvet 3, 1799 København V
If the customer uses e-Conomic for bookkeeping, this subcontractor is used.
Visma Dinero ApS
34731543
Gærtorvet 3, 1799 København V
If the customer uses Dinero for bookkeeping, this subcontractor is used.
Visma Creditro A/S
39181169
Østervangsvej 4C 1.sal 6715 Esbjerg N
Money laundering control platform
Uniconta A/S
33266928
Ørestads Boulevard 73
If the customer uses Uniconta for bookkeeping, this subcontractor is used.

 

Payroll Administration

Name CVR number Address Description of processing
Danske Lønsystemer A/S
15611472
Gydevang 46, 3450 Allerød
If the customer uses Danløn for salary payments, this subcontractor is used.
Epos Group A/S
39820242
Industriparken 27, 2750 Ballerup
Hosted and serviced by Assets Insight, which they connect to via VPN.
Intempus ApS
34696977
Staunings Plads 3 1607 København V
If the customer uses Intempus for time registration, this sub-address is used.
Microsoft Danmark ApS
13612870
Kanalvej 7, 2800 Kongens Lyngby
Microsoft Office365 and Teams
Visma Dataløn og ProLøn A/S
48117716
Gærtorvet 3, 1799 København V
If the customer uses Dataløn or ProLøn for salary payment, this subcontractor is used.
Zenergy ApS
36409371
Vildroseparken 2, 3540 Lynge
If the customer uses Zenergy for salary payments, this subcontractor is used.

 

Advisory and compliance services

Name CVR number Address Description of processing
Whistlebox BV
BE0754832521
3290 Diest, Statiestraat 41
Platform provider for customer-oriented whistleblower scheme.

 

Last updated: 12 February 2026

 

Supervision of Grant Thornton as data processor

In Grant Thornton’s standard Data Processing Agreement (DPA), which is made available when we enter into an agreement for services where we act as data processor, it is stated that:

“The data controller may supervise Grant Thornton based on a risk-based approach in accordance with the Danish Data Protection Agency’s supervisory concepts. The supervisory concepts recommended by the Danish Data Protection Agency include:

  • Observation of the data processor with internal logging
  • Written confirmation from the sub-processor that all requirements in the sub-processing agreement continue to be complied with
  • Obtaining the data processor’s certification
  • Obtaining the data processor’s ISAE 3000 and/or ISAE 3402 assurance report
  • Distribution of a questionnaire to the sub-processor for subsequent evaluation”

When Grant Thornton acts as a data processor, this will typically be in situations where we provide payroll or bookkeeping assistance.

From a risk perspective on behalf of the data controller, we assess that our data processing does not present a high risk to the individual data subject, nor within the data controller’s overall risk assessment.

We take our responsibility to assist the data controller in supervisory activities very seriously. Based on a risk-based approach on behalf of the data controller, we accommodate supervision concept 1 and 2. If, in the data controller’s risk assessment, additional supervision is considered necessary, we accommodate and propose supervision concept 5.