Sub-processors list
Last updated : July 2, 2026
Named list of the sub-processors NEXUS AI uses to provide the Service, with their role and jurisdiction. This page is authoritative for the "Data processing on behalf of the customer" clause of the Terms of Use and for the Privacy Policy.
1. Current sub-processors
Supabase — Database hosting and authentication · Canada (ca-central-1 region, Montreal) · account data, Customer Content, logs.
Vercel — Website and application delivery (CDN, edge) · United States · technical request data (IP, headers).
Stripe — Payment and subscription processing · United States · billing and payment data (PCI DSS).
Resend — Transactional email delivery · United States · email address, content of sent emails.
Anthropic — Artificial-intelligence models (Claude) · United States · content submitted to agents, after minimization per the configured level.
DeepSeek — AI model for audit analyses · China · ONLY minimized data: personal information (emails, phone numbers, national IDs, cards) is automatically redacted before any transmission.
Sentry — Application error monitoring · United States · technical error traces (PII stripped before sending); session replay only with analytics consent.
Meta (WhatsApp Business) — WhatsApp messaging · United States · phone number and WhatsApp message content.
Twilio — SMS and telephony · United States · phone number, SMS content, call metadata.
Vapi — Voice agent (receptionist) · United States · audio and transcripts of voice calls.
2. Prior-notice commitment
Any addition or replacement of a sub-processor is announced on this page with thirty (30) days prior notice, during which customers may object on legitimate grounds (clause 8 of the Terms).
Each communication of personal information outside Quebec is preceded by a privacy impact assessment (PIA), in accordance with s. 17 of Law 25.
3. Contact
Questions about this list or our processing agreements: privacy@nexus.ai.
Version 1.1 — updated 2026-07-02 · Under review by legal counsel.