Sub-processors

Effective date: July 12, 2026. We update this list and notify customers before adding a sub-processor that processes personal data.

Sub-processor	Purpose	Notes
Vercel	Application hosting / CDN	US; SOC 2
Cloudflare	DNS, edge, object storage (R2)	Global; SOC 2 / ISO 27001
Stripe	Payments & billing	PCI-DSS Level 1
Resend	Transactional email	Sends verification/reset/notices
Google Workspace	Support mailbox / email	For support@ correspondence
Anthropic (Claude)	AI features — optional	Only if AI is enabled; no training on your data
OpenAI	AI features — optional	Only if you choose OpenAI as your provider
Aiven / Supabase / Neon / AWS	Database — customer-selected	You choose & control (BYODB); region is yours
AWS S3 / Cloudflare R2	File storage — customer-selected or managed	BYO or our managed tier

Customers on bring-your-own database/storage choose and control those providers directly. Questions: support@nexteln.com.