← Back to Home

Subprocessor List

Last updated: March 2026

The following third-party subprocessors are engaged by Nexus Automate AI, S.L. to process data on behalf of our clients. This list is maintained in accordance with our Data Processing Agreement and GDPR Article 28 requirements.

Subprocessor	Purpose	Location	Transfer Mechanism
DigitalOcean	Platform infrastructure hosting (compute, storage, databases)	EU (Frankfurt, Amsterdam)	N/A (EU only)
Vercel	Website hosting and CDN	EU / US	SCCs
Google Vertex AI (Gemini)	AI model inference for real-time decisions and chat	US	SCCs + PII stripping
Groq	Fallback AI model inference	US	SCCs + PII stripping
Moonshot AI (Kimi)	Batch document processing (catalogs, content). No personal data.	China	No personal data transferred
Web3Forms	Contact form submission processing	EU	N/A (EU only)
Google Workspace	Business email (anshika@nexus-automate.com)	EU / US	SCCs + Adequacy (DPF)

Notes

• PII stripping: For all AI inference providers (Google Vertex AI, Groq), personal identifiers are automatically detected and removed before any data leaves EU infrastructure. Only pseudonymized behavioral context is transmitted.
• Moonshot AI (Kimi): Used exclusively for product catalog processing and synthetic content generation. No personal data of any kind is ever sent to this provider.
• SCCs: Standard Contractual Clauses as approved by the European Commission (Commission Implementing Decision (EU) 2021/914).
• DPF: EU-U.S. Data Privacy Framework adequacy decision.

Change Notification

In accordance with our Data Processing Agreement, clients are notified at least 30 days in advance of any addition or replacement of subprocessors. To receive notifications, contact anshika@nexus-automate.com.