Subprocessors

Infrastructure & platform

• Supabase — managed Postgres database, authentication, and file storage. Hosts customer business data under tenant isolation. EU region where configured.
• Vercel — application hosting and content delivery for the web app and marketing site.

Payments (when enabled)

• Stripe — payment processing for subscriptions and, on the supplier Marketplace, Stripe Connect. Stripe is the regulated payment service provider; the supplier is the merchant of record.

AI features

• AI features are gated. Live AI generation runs on synthetic/demo organisations only; real customer personal data is not sent to an AI provider today.
• Google (Gemini) — routine AI assistant turns for the standard AI tier. When enabled it receives only the minimal business context needed for the turn — never secrets, never bulk personal data — with provider-side tools disabled and no conversation state retained by the provider for later retrieval.
• Anthropic (Claude) — premium AI reasoning for the NEXOGEN AI Max tier, on the same minimal-context, provider-tools-disabled, no-retained-state basis.
• Processing region, retention, training settings, and the provider data-processing agreement and transfer safeguards are confirmed with the provider before any live AI use on real customer data.

Communications (gated, not live)

• Telnyx — voice/SMS connectivity for telecom features. Disabled today; enabled only after the telecom classification and any ANCOM step are cleared.

Roles

For your account and website data, NEXOGEN S.R.L. is the controller. For the business data you enter about your own customers, you are the controller and NEXOGEN S.R.L. is your processor under a Data Processing Agreement; these subprocessors act on our behalf under that agreement.