Transparency Act Statement
Last updated: 23 June 2026·Version: 1.0
About this statement: This page describes how MyCapsule AS works with fundamental human rights and decent working conditions in our supply chain, in line with the Norwegian Transparency Act (Act No. 14 of 2021 relating to enterprises' transparency and work on fundamental human rights and decent working conditions). We publish this statement voluntarily to support transparency with our customers and partners.
1. About MyCapsule
MyCapsule AS (Org. no. 931084461) develops and operates MyCapsule, a B2B platform for workforce well-being monitoring. We are headquartered at Gulaksvegen 31, 4345 Bryne, Norway.
Our platform helps employers detect early signs of overload and physical strain through weekly pulse surveys, with privacy safeguards including aggregated reporting and minimum group size thresholds.
2. Scope of this statement
This statement covers:
- MyCapsule AS's own operations
- Our key subprocessors and technology suppliers
- Our approach to due diligence in the supply chain
It does not cover our customers' treatment of their own employees — that remains the responsibility of each customer as data controller.
3. Our supply chain
MyCapsule relies on the following categories of suppliers:
| Category | Suppliers | Function |
|---|---|---|
| Cloud infrastructure | Supabase, Vercel | Database, authentication, application hosting |
| Payments | Stripe | Subscription billing |
| Communications | Twilio | SMS delivery for pulse surveys |
| Authentication & fonts | OAuth sign-in, web fonts |
See our Subprocessor List for details.
4. Due diligence approach
We assess suppliers based on:
- Data protection: GDPR compliance, DPA availability, and data processing agreements
- Security: industry-standard security practices, encryption, and incident response capabilities
- Transparency: published privacy policies, security documentation, and compliance certifications where available
- Human rights: supplier codes of conduct and public commitments to labor standards
We prioritize EU/EEA-based data processing where possible. Primary application data is stored in West EU (Ireland).
5. Identified risks and mitigations
| Area | Risk | Mitigation |
|---|---|---|
| Cloud providers (US-based) | Data transfers outside EEA; labor practices in global operations | SCCs and DPA with subprocessors; EU data residency for primary database |
| SMS delivery | Global telecom infrastructure; worker conditions in supply chain | Established provider (Twilio) with published responsibility standards; minimal data shared |
| Platform misuse | Customer could use aggregated data in ways harmful to employees | DPA obligations, acceptable use terms, aggregation safeguards, employee notice template |
| Own operations | Limited direct supply chain beyond technology vendors | Small team; Norwegian labor law applies to our employees |
6. Our own working conditions
MyCapsule AS complies with Norwegian labor law and international labor standards applicable to our operations. We do not tolerate forced labor, child labor, or discrimination in our own organization.
7. Grievance mechanism
Concerns about human rights or working conditions related to MyCapsule's operations or supply chain may be reported to:
We will acknowledge reports within 10 business days and investigate substantiated concerns.
8. Results and follow-up
As of 23 June 2026, we have not identified material breaches of fundamental human rights or decent working conditions in our direct supply chain. We review subprocessors annually and update our Subprocessor List when changes occur.
Next planned review: June 2027.
9. Contact
MyCapsule AS
Gulaksvegen 31, 4345 Bryne, Norway
Email: morten@mycapsule.eu