Subprocessors

Infrastructure & platform

• Supabase — managed Postgres database, authentication, and file storage. Hosts customer business data under tenant isolation. EU region where configured.
• Vercel — application hosting and content delivery for the web app and marketing site.

Payments (when enabled)

• Stripe — payment processing for NEXOGEN subscriptions. Stripe is the regulated payment service provider.

AI features

• AI features are gated. Live AI generation runs on synthetic/demo organisations only; real customer personal data is not sent to an AI provider today.
• Google (Gemini) — AI assistant turns for both the standard and premium (Max) AI tiers. When enabled it receives only the minimal business context needed for the turn — never secrets, never bulk personal data — with provider-side tools disabled and no conversation state retained by the provider for later retrieval.
• Anthropic (Claude) — retained as a possible alternative AI provider; not currently used and not receiving any data. If a tier is ever routed to it, this list is updated and the change is notified to you in advance under the Data Processing Agreement.
• Processing region, retention, training settings, and the provider data-processing agreement and transfer safeguards are confirmed with the provider before any live AI use on real customer data.

Communications (gated, not live)

• Telnyx — voice/SMS connectivity for telecom features. Disabled today; enabled only after the telecom classification and any ANCOM step are cleared.

Roles

For your account and website data, NEXOGEN S.R.L. is the controller. For the business data you enter about your own customers, you are the controller and NEXOGEN S.R.L. is your processor under a Data Processing Agreement; these subprocessors act on our behalf under that agreement.