Terms of Use
The terms of use for aktiebok.io, with the data processing agreement for register data.
Last updated: 5 October 2026
aktiebok.io is a share register (aktiebok) and cap table for Swedish limited companies, provided free of charge by Stockholm Innovation & Growth AB (org. nr 556489-3781), Östermalmsgatan 26 A, 114 26 Stockholm ("Sting", "we"). By signing in you accept these terms. If you create a company in aktiebok.io or administer one, you also accept them on that company's behalf, and you confirm that you may.
1. What aktiebok.io is
- The software a company keeps its share register in. The company's board keeps the register, as Aktiebolagslagen 5 kap requires; aktiebok.io is where it is kept.
- We do not file anything with Bolagsverket, and we give no legal, tax or financial advice. The guides in the app and in the AI connector describe how to enter events; they are not advice.
- Every change to a register is made by one of the company's administrators: an entry as a draft that is shown and confirmed, a holder's or the company's details directly. We never change a register.
2. Your responsibilities
- The company is responsible for what its register says: that it is correct, complete and up to date, and that each entry has the decision or document behind it.
- You are responsible for who you give access to: members, the addresses and domains a holding is made visible to, and the AI apps and tokens you connect. An AI app acts with the access you gave it. What it reads leaves aktiebok.io and is handled under your agreement with that app's provider.
- Keep your own copies. Export the register regularly, and keep the files from any platform you moved from: aktiebok.io does not keep them.
- Do not use aktiebok.io to break the law, to store data that does not belong in a share register, or to disturb the service. The limits that protect it are shown under Account.
3. What we promise
- Free. aktiebok.io costs nothing.
- Your data stays yours. You can export everything at any time: the register, the cap table, the history and the holders.
- We do not delete a register on our own. A company is removed only by its administrators and can be restored for 30 days. The web app asks for an export first.
- If we ever close the service, every company's administrators get at least 3 months' notice by email, and the full export stays available throughout.
4. What we do not promise
- No support. We read feedback and requests at aktiebokio@sting.co and reply when we can. We do not answer individual questions about your register.
- No guarantee of availability. The service may be unavailable, change, or have faults. We may limit or suspend an account that misuses it.
- As it is. aktiebok.io is provided free and without warranties. As far as the law allows, Sting is not liable for loss or damage arising from its use, including a register that is wrong, unavailable or lost, and never for indirect loss. Nothing here limits liability that the law does not allow to be limited.
5. Accounts
You sign in with a link sent to your email address. Whoever controls that mailbox controls the account, so keep it safe. You can delete your account at any time, unless you are the only administrator of a company: hand it over or remove it first.
6. Changes and ending
We may change these terms. Administrators get 30 days' notice by email before a change that matters takes effect. You may stop using aktiebok.io at any time: export, then remove the company and delete your account.
7. Data processing agreement
This section is the agreement under GDPR article 28 between the company that keeps its register in aktiebok.io (the controller) and Sting (the processor). It applies to the personal data in the company's register. For account data Sting is the controller, as the Privacy Policy describes.
- What is processed and why. The register's data, to let the company keep, read, change and export its share register: holders' names, personnummer or other identity numbers, addresses, contact emails, holdings and their history, and the email addresses of the company's members. The people concerned are the company's shareholders, former shareholders, holders of warrants and options, and members. Processing lasts for as long as the company keeps its register in aktiebok.io, and 30 days after it removes it.
- Instructions. Sting processes the data only on the company's documented instructions. These terms, and what the company's administrators do in the service, are those instructions. If the law requires Sting to process the data otherwise, Sting tells the company first, unless the law forbids it.
- Confidentiality. Everyone at Sting who can access the data is bound by confidentiality.
- Security. Sting keeps the data in the EU, checks every read and write against the user's access in the database itself, masks personnummer by default, keeps a log of changes and takes daily backups. The measures are described in the Privacy Policy, section 9.
- Other processors. The company agrees that Sting uses the providers listed in the Privacy Policy, section 5. Sting binds them to the same obligations and remains responsible for them. Before adding or replacing one, Sting gives the company's administrators 30 days' notice by email; a company that objects can export and remove its register.
- Transfers. The data is stored in the EU. Where a provider may access it from outside the EU/EEA, the transfer is protected by the EU Commission's standard contractual clauses.
- People's rights. A request from a person about their data in a register goes to the company. Sting does not answer or forward such requests. The service gives the company the means to answer them itself: its administrators can read, correct and export the register at any time.
- Incidents. Sting tells the company's administrators without undue delay after learning of a personal data breach that concerns the company's register, with what is known about it.
- Information. What a company needs to meet its duties on security and impact assessments, and to show that this section is followed, is published: these terms, the Privacy Policy and the Documentation. That published information is what Sting provides in place of audits.
- When it ends. The company exports its register at any time. When it removes the company from aktiebok.io, the data is deleted after 30 days, and from the backups within 7 days after that. The duty to keep the aktiebok for ten years after the company is dissolved is the company's own.
8. Law
Swedish law applies. Disputes are settled by Swedish courts, with Stockholm District Court as the first instance.