[00]Subprocessors
Subprocessor register
The material service providers we use to run client systems, what each one is for, and what data it touches.
Version PUBLIC_2026_08_v1 · Effective 20 August 2026
Verification in progress
Some entries are marked “to verify”. We publish the supplier and its purpose, and confirm the registered legal name, processing location and transfer mechanism against the actual contract before stating them here.
| Provider | Purpose | Data categories | Processing location | Applies to |
|---|---|---|---|---|
| Vercel legal name to verify | Application hosting, edge delivery and deployment | Client Data in transit; request and security logs | To verify | core, pro, max, enterprise, website |
| Supabase legal name to verify | Managed database, authentication and file storage | Client Data; authentication records; stored files | To verify | core, pro, max, enterprise |
| Stripe legal name to verify | Payment processing and connected-account integration | payment and transaction metadata; billing contact details; card data handled by the processor, never by Nullshift | To verify | core, pro, max, enterprise |
| GoCardless legal name to verify | Direct Debit collection for recurring plans | bank mandate details; payment metadata | To verify | core, pro, max, enterprise |
| Resend legal name to verify | Transactional email delivery | email address; message content and delivery metadata | To verify | pro, max, enterprise, website |
| Anthropic legal name to verify | AI model inference for AI Features and internal agent workflows | configured AI Inputs and Outputs | To verify | pro, max, enterprise |
| Xero legal name to verify | Accounting records and invoice mirroring | billing contact details; invoice and payment records | To verify | core, pro, max, enterprise |
Where we add or replace a material subprocessor that processes Client Data, we give affected clients at least 14 days' notice before the change takes effect, wherever practicable, and provide a route to object. Updating this page is not by itself contractual notice where the agreement requires direct notice.