Current subprocessors
We use these companies to run Nuvlo. Each processes personal data only on our instructions and under a data processing agreement. Transfers outside the EU are covered by the EU-U.S. Data Privacy Framework or standard contractual clauses, as described in the privacy policy.
| Company | Purpose | Data | Location |
|---|---|---|---|
| Supabase, Inc. | Database, sign-in and file storage for the Nuvlo application | Account, workspace and billing records; encrypted credentials | EU (Paris, France) |
| Application hosting | Runs the Nuvlo application | All data processed by the application | Contabo GmbH, Germany |
| Cloudflare, Inc. | Protects and delivers nuvlo.dev; checks sign-in forms for bots (Turnstile); serves temporary nuvlo.link site addresses; stores site preview images and saved deploy logs | IP addresses and request data; traffic to temporary addresses; preview images; deploy logs | Global network; USA |
| Stripe Payments Europe, Ltd. | Payments, invoices, tax calculation and fraud prevention | Name, email, billing address, VAT ID, payment details | Ireland; USA (Stripe, Inc.) |
| Resend | Sends service emails such as purchase confirmations and server notices | Email address and email content | USA |
| Anthropic | AI features: explanations, migration advice, suggested code fixes | The content of each AI request, such as findings, plugin lists or repository files | USA |
Services you choose to connect
Cloud providers, Git providers, Cloudflare accounts, storage providers, AI provider keys, AI agents and alert channels (such as Slack or Telegram) that you connect to Nuvlo are not our subprocessors. You choose them and they work for you under your own contract with them; Nuvlo passes on your instructions.
Changes to this list
Before we add or replace a subprocessor that processes data on your behalf, we update this page and email account owners at least 30 days in advance. Customers under the data processing agreement can object as described there.