Vilka system kan Xpendio integreras med?

Xpendio integreras med ekonomisystem, inköpssystem och andra datakällor via API, SFTP/filöverföring och e-faktura. Det finns en färdig API-integration mot Visma Proceedo och data hämtas från system som Unit4 (Agresso), Raindance, Visma och Fortnox.

Xconnect är Xpendios egenutvecklade integrationsmotor som kopplar samman Xpendio med kundens befintliga system. Xpendio äger och kontrollerar hela integrationsflödet, vilket ger snabbare uppstart, tryggare drift och inga tredjepartsberoenden.

Hur lång tid tar det att komma igång?

Uppstarten ingår i en strukturerad onboarding med kickoff, grundkonfiguration och go-live-stöd. Datainläsningen sätts upp i första fasen och de flesta kunder kan börja analysera inom de första veckorna.

Hur hanteras säkerhet och GDPR?

Tjänsten driftas i en svensk molnmiljö med SSO via SAML genom Svensk e-identitet. Xpendio arbetar enligt ISO 27000, ISO 9001 och ISO 14001 och hanterar personuppgifter enligt GDPR med personuppgiftsbiträdesavtal (DPA).

Behöver vi göra något tekniskt själva?

Nej, ingen egen teknisk resurs behövs. Kunden pekar ut datakällan och Xpendio sköter uppsättning, inläsning och kvalitetssäkring. Fri support ingår alltid utan timdebitering.

Vad kostar en integration?

Kostnaden beror på systemmiljö och omfattning. Boka en demo så går Xpendio igenom er uppsättning och ger en tydlig bild av vad som krävs för att komma igång.

Privacy Policy

Human-readable policy for Xpendio AB – for the website, service, and integrations (including the Visma Proceedo API)

Version 1.2 • November 7, 2026

This Privacy Policy describes how Xpendio AB collects, uses, stores, and shares personal data when you visit our websites, use our services, or interact with us. If you use Xpendio’s service through your employer or client organization, we may process personal data both as a data controller and as a data processor.

1. Data Controller

Xpendio AB is the data controller for processing carried out for our own purposes (e.g., website and marketing).

Company: Xpendio AB (org. no. 559053-3922)
Address: Trädgårdsgatan 11, 753 09 Uppsala, Sweden
Data Protection Contact: support@xpendio.se
Supervisory authority in Sweden: The Swedish Data Protection Authority (IMY).

2. When We Act as a Data Processor

When we provide our SaaS service to a customer (e.g., your employer), we often process personal data at the customer’s instruction. In such cases, the customer is the data controller and Xpendio is the data processor. In these instances, we refer to the customer’s information regarding the processing as well as our Data Processing Agreement (DPA).

3. What Information We Collect

Contact information: name, email, phone number, company, role/title.
Account information: user ID, access level, authentication data (to the extent applicable).
Service data: information that you or your organization uploads or creates within the service (may contain personal data).
Technical data: IP address, logs, device/browser data, timestamps.
Communications: support cases, emails, and other correspondence.
Cookies and similar technologies on the website (see Section 9).

4. How We Use Personal Data

Purpose	Examples of processing	Legal basis (when Xpendio is the controller)
Providing the website and communication	Responding to inquiries, demo requests, and customer interactions	Legitimate interest or contract
Marketing	Newsletters and product information (with opt-out option)	Legitimate interest or consent
Customer and contract administration	Billing, contracts, onboarding	Contract / legal obligation
Security and quality	Logging, monitoring, troubleshooting, incident management	Legitimate interest / legal obligation
Compliance	Complying with legal requirements and handling requests for rights	Legal obligation

When Xpendio acts as a data processor, we process personal data in accordance with the customer’s instructions and the DPA.

5. How long we retain data

We retain personal data for as long as necessary for the purposes stated above, or for as long as required by law.

Examples:

Communication and support cases: typically retained for a limited period after resolution—24 months—unless a longer retention period is required to resolve a dispute or for security purposes.
Marketing data: Stored until you unsubscribe or after a period of inactivity.
Logs: Stored for a limited period for security and troubleshooting purposes and then deleted.
Customer data in the service: handled in accordance with the agreement with the customer (contract term + transition period for export/deletion).

6. Who We Share Data With

We may share personal data with:

Our suppliers/processors who help us deliver the service (e.g., operations, logging, databases).
Authorized subcontractors in connection with support and technical operations.
Government agencies if we are required to do so by law.
The customer organization (when we act as a processor) to the extent necessary to provide the service.

7. Transfers Outside the EU/EEA

Our goal is to process data within the EU/EEA. If a transfer outside the EU/EEA does occur, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and supplementary measures as needed.

8. Your Rights

Right to information and access (record extract).
Right to rectification.
Right to erasure (“right to be forgotten”) where applicable.
Right to restriction of processing.
Right to data portability (where applicable).
Right to object to processing based on legitimate interest.
Right to withdraw consent (when processing is based on consent).
Right to file a complaint with IMY.

To exercise your rights: contact support@xpendio.se. If we process data as a data processor, we may need to refer you to the client organization that is the data controller.

9. Cookies

We use cookies to ensure the website functions properly and to improve the user experience. Some cookies are technically necessary and are always enabled. You can manage your cookie settings in our cookie banner or in your browser.

If you decline, your information will not be tracked when you visit the website; a cookie may be used to remember your choice.

10. Security

We use technical and organizational security measures to protect personal data, including access controls, encryption during transmission (TLS), logging, and incident management.

11. Changes to This Policy

We may update this policy as needed. The latest version is published at the URL where the policy is provided.