Subprocessors
All third parties that process customer data as part of nisd2.eu.
Under Art. 28 GDPR we disclose all subprocessors we use. This list is updated when changes occur.
Last updated: May 2026
| Provider | Purpose | Location | Legal basis |
|---|---|---|---|
| Hetzner Online GmbH | Server hosting, database | Deutschland (DE) | EU member state |
| Amazon Web Services EMEA SARL | File / evidence storage (S3) | Luxemburg (EU) | EU member state |
| Google Ireland Limited | OAuth authentication | Irland (EU) | EU member state |
| Resend Inc. | Transactional emails | USA | EU Standard Contractual Clauses |
Note on third-country transfers
Resend Inc. is based in the United States. Personal data is transferred on the basis of the EU Standard Contractual Clauses (SCCs) under Art. 46 GDPR.
Changes
If we intend to add or replace a sub-processor, we tell customers of the hosted platform by email at least 30 days in advance. They may object (data processing agreement, section 3). Anyone who runs the software themselves does not use these sub-processors.