Sub-processor Registry

Sub-processors engaged by Neuravant AI Limited to support delivery of the NAIL platform. We notify customers at least 30 days before any addition or replacement. Customers may object under Art. 28(2) GDPR by writing to legal@neuravant.ai.

Sub-processor Purpose Location of Processing Transfer Mechanism
Google Cloud EMEA Ltd.
Google Ireland Ltd. โ€” Dublin, IE
Core infrastructure (Cloud Run, Cloud SQL, Cloud Storage, Cloud KMS, BigQuery) europe-west3
(Frankfurt, DE)
Intra-EEA โ€” no transfer mechanism required. DPF-certified parent where applicable.
Cloudflare, Inc. CDN, DDoS protection, WAF, edge caching, static hosting (Cloudflare Pages) Global edge network; EEA points of presence prioritised EU Commission SCCs (2021/914) Module 2; UK IDTA Addendum; DPF certified
Stripe Payments Europe Ltd. Payment processing, subscription billing, tax compliance (when Cover launches) Ireland (primary), USA (failover) EU Commission SCCs; DPF certified
SendGrid (Twilio Ireland Ltd.) Transactional email (account verification, certification notifications, waitlist) Ireland (primary), USA (failover) EU Commission SCCs; DPF certified
Sentry (Functional Software, Inc.) Application error and performance monitoring (PII scrubbed at ingestion) EU region (Frankfurt) EU Commission SCCs; EU-hosted tier
Plausible Analytics (Hostinger UAB) Privacy-preserving, cookie-less web analytics (no PII, no cross-site tracking) Germany (Hetzner, Falkenstein) Intra-EEA โ€” not applicable
Hugging Face, Inc. Hosted open-weight model registry (no customer PII transmitted) USA; EU mirror when available EU Commission SCCs; transfers limited to model artifacts, no personal data
1Password Internal secret and credential management (not customer-facing) Canada; EU replica Canada adequacy decision (Commission Decision 2002/2/EC)

Change history

Notifications

Subscribe to sub-processor change notifications by emailing legal@neuravant.ai with subject line "Subscribe sub-processor notifications".

Version 1.0 ยท April 2026