TL;DR
🌍 We publish our sub-processors list in line with GDPR Art. 28. Updated when we add or remove a vendor. EU-only by default.
📋 Current sub-processors
| Vendor | Purpose | Location |
|---|---|---|
| 🇩🇪 Hetzner Cloud | Compute & storage | Germany |
| 🇫🇷 Scaleway | Backup storage | France |
| 🇪🇺 PurelyMail | Transactional email | EU |
| 🇮🇪 Stripe (Ireland) | Payment processing | Ireland (EU) |
| 🇪🇺 Cloudflare (EU) | DDoS protection + CDN | EU edge nodes |
📨 Get notified of changes
Subscribe to sub-processors@nexcyber.eu for 30-day advance notice of any sub-processor change.
🔐 Our process for adding a sub-processor
- Security & privacy review
- DPA signed
- Notification published
- 30-day notice period
- Then go-live
➡️ Next
💬 Need help?
Reach out via our live chat (bottom-right) — Captain AI replies instantly, human experts within business hours.
Email support@nexcyber.eu with [P1] for Command/Strategic priority issues.
ℹ️ Disclaimer — NexCyber provides a readiness analysis, not legal advice. Final compliance may require legal review or notified body certification.
Last reviewed: 2026-06-02 · NexCyber Help Center