Subprocessors
Ostatnia aktualizacja 2026-10-27
Nucra uses the subprocessors below to run the service. Each is bound by data-protection obligations equivalent to those in our DPA. We give notice before adding or replacing a subprocessor.
Categories
Current categories (specific providers and regions to be confirmed before launch): • Cloud hosting and infrastructure — running the application and database. • E-mail delivery — sending transactional e-mails (e.g. password reset, notifications). • Object/file storage — storing uploaded documents, where applicable. • Mapping and geocoding — address lookup and map display, where applicable. • Error and uptime monitoring — operational security and reliability, where applicable. • AI document reading and in-app assistant — extracting fields from documents you upload and answering questions in the app.
Current providers
The providers in use today: • DigitalOcean — application hosting, database and uploaded-document storage (EU, Frankfurt/Amsterdam). • Backblaze — encrypted off-site backup of the database and documents (EU, Amsterdam). Backups are encrypted with a key held only by Nucra’s operator, so the provider cannot read them. • Anthropic — the language model behind the AI-assisted features described in the Privacy Notice (United States). Data sent is not used to train models. • Resend — delivery of transactional e-mail (notifications, password reset). • Vercel — hosting of the public website nucra.io. • OpenStreetMap / Nominatim — address lookup and map tiles for the public site and the tracking map.
Transfers
Where a subprocessor is outside the EEA/UK, transfers of EU/EEA and UK personal data are covered by an adequacy decision (including the EU–US Data Privacy Framework where applicable) or the EU Standard Contractual Clauses / UK IDTA. The definitive list with legal names, roles and locations is published before the first production customer.