* docs(legal): align in-repo privacy and DPA pages with actual AI subprocessor facts
The published marketing-site DPA claimed Anthropic PBC and OpenAI Inc (USA)
as AI subprocessors. Ground truth: AI inference runs Anthropic Claude models
operated by AWS via Amazon Bedrock in eu-north-1 (Stockholm); no data is sent
to Anthropic as a company and there is no third-country transfer. This commit
updates the in-repo /privacy and /dpa pages to state that fact explicitly,
discloses PostHog deny-by-default session-replay masking, and bumps the
last-updated dates to 2026-08-20. The marketing-site pages are outside this
repo and still need manual edits.
Part of #1674
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* docs(legal): fix systemdokumentation AI integration row, defer page wording to #1766
Resolves the CodeRabbit findings on PR #1770 in one pass:
- public/docs/systemdokumentation-mall.md said transaction and document
data flows Accounted -> Anthropic -> Accounted. Corrected to Amazon
Bedrock (AWS, eu-north-1 Stockholm) with Anthropic Claude models
running inside Bedrock; data does not leave the EU.
- The privacy and DPA page edits this PR originally carried are dropped:
PR #1766 merged the same #1674 alignment first with wording pinned by
app/(public)/privacy/__tests__/ai-and-replay-disclosures.test.ts,
which forbids the DPA naming Anthropic and forbids the Bedrock row
asserting sub-processor status either way. Both pages are now
byte-identical to main.
Part of #1674
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* docs(legal): self-host note in systemdokumentation template AI row
Swedish compliance review on PR #1770: the blanket 'datan lamnar inte EU'
claim in the Amazon Bedrock integration row is only true for the hosted
default configuration. A self-hosted operator running AI_PROVIDER=anthropic
or a custom AI_BASE_URL endpoint who fills in this template unchanged would
produce systemdokumentation that misstates the data flow (BFNAR 2013:2
kap 8 requires the documentation to describe the actual system). Adds a
bracketed template note, in the same style as the existing integrations
placeholder, telling self-hosted operators to update the row to their
actual provider, region and data flow.
Part of #1674
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Mattsson
a2c9a12cfc