About This List
NevTan Cloud uses certain third-party service providers ("subprocessors") that process customer personal data on our behalf in order to deliver the Services. This page lists our current subprocessors, their processing locations, and the purposes for which data is processed.
DPA with every vendor
All subprocessors have signed Data Processing Agreements with NevTan Cloud.
30-day notice
We notify customers 30 days before adding or replacing any subprocessor.
Transfer safeguards
SCCs or equivalent mechanisms in place for all international transfers.
We require all subprocessors to maintain appropriate data protection standards and to process customer data only as directed by NevTan Cloud.
Change Log
| Version | Date | Change |
|---|---|---|
| v1.1 | June 2026 | Initial published version |
Infrastructure and Cloud
| Provider | Purpose | Processing Location |
|---|---|---|
| DigitalOcean | Cloud infrastructure, compute, storage, networking | US, EU, APAC |
| Cloudflare | CDN, DDoS protection, DNS, edge networking | Global |
Payments and Billing
| Provider | Purpose | Processing Location |
|---|---|---|
| Stripe | Payment processing, subscription management, invoicing | US, EU |
Authentication and Identity
| Provider | Purpose | Processing Location |
|---|---|---|
| Google (OAuth) | Social authentication (sign-in with Google) | US |
| GitHub (OAuth) | Social authentication and repository integration | US |
Communications
| Provider | Purpose | Processing Location |
|---|---|---|
| SendGrid / Twilio | Transactional email (verification, notifications, alerts) | US |
Monitoring and Observability
| Provider | Purpose | Processing Location |
|---|---|---|
| MongoDB Atlas | Application data storage | US |
Notification of Changes
We will provide at least 30 days' advance notice of any addition of new subprocessors that process customer personal data. Notice will be provided via email to the account owner and through an update to this page.
If you have concerns about a new subprocessor, please reach out via the Trust Center before the effective date.
Contact
For subprocessor-related inquiries, reach out via the Trust Center.
Got questions?
We're here to help
Our team responds to legal and policy questions within one business day.