Subprocessors
All third parties that process customer data as part of nisd2.eu.
Under Art. 28 GDPR we disclose all subprocessors we use. This list is updated when changes occur.
Last updated: May 2026
| Provider | Purpose | Location | Legal basis |
|---|---|---|---|
| Hetzner Online GmbH | Server hosting, database | Deutschland (DE) | EU member state |
| Amazon Web Services EMEA SARL | File / evidence storage (S3) | Luxemburg (EU) | EU member state |
| Google Ireland Limited | OAuth authentication | Irland (EU) | EU member state |
| Resend Inc. | Transactional emails | USA | EU Standard Contractual Clauses |
| xAI Corp. | AI-assisted form prefill (optional) | USA | EU Standard Contractual Clauses |
Note on third-country transfers
Resend Inc. and xAI Corp. are based in the United States. Personal data transfers are made on the basis of EU Standard Contractual Clauses (SCCs) under Art. 46 GDPR. xAI is used only for AI-assisted form prefill and only when the user actively uses that feature. Users are informed of data sharing transparently within the platform.
Changes
We will notify self-host customers of material changes to this list at least 30 days in advance.