Sub-processors

NDT Intact is run by [navnet på operatøren]. To provide it we use the providers below, each bound by a data processing agreement with us. We tell customers before we add or replace one, as our data processing agreement says.

Provider	What for	Where the data is
Vultr	The servers, the databases and the file storage of the service, and its encrypted backups	The hosting region each company chooses: Amsterdam (Europe), New York (North America) or Singapore (Asia); backups in Amsterdam
Cloudflare	The network in front of the service: the addresses, protection against attacks, and certificates	Its network, worldwide; the requests pass through it, nothing is stored there
Amazon Web Services (Amazon SES)	Sending the service's emails: invitations, notifications, the links to confirm an address or choose a password	Germany (European Union)
Sentry	Reports of errors in the service, to fix them; they carry identifiers only, never names, addresses or what a report says	Germany (European Union)
Vultr	AI drafts (reading a document into a proposal, a translation), only for companies that have switched AI on, and only the documents and text sent for a draft	As the provider states
A second storage provider in each region	A second copy of the files, for recovery	The same region as the first copy

Payments are taken by Paddle.com, our merchant of record, which handles card details under its own terms and privacy notice; card numbers never reach us.