This list was last updated October 2024. Major changes will be preceded by our own data protection impact assessment
| Sub-Processor Name | Data Subjects | Processing Purpose | Data to be Processed | Storage Location |
| Autotask (Datto Europe) | Staff of our clients | Administering sales and support processes | Contact details, responsibilities, correspondence | UK |
| CrewHu | Staff of our clients | Recording support ticket feedback | Contact details, feedback | US |
| IT Glue | Staff of our clients | Administering support processes | Contact details, responsibilities | Germany |
| Microsoft (Office 365 & Dynamics) | Staff and customers of our clients; prospects | Email, SharePoint development, prospecting, Nexus document storage for performance of a contract | Contact details, correspondence, potentially our clients’ customer data | UK |
| Finance Software | Staff of our clients | Financial record-keeping, payments | Contact details | UK data centre |
| GoCardless (Direct Debit) N.B. as Joint Data Controllers | Name/contact details for direct debit account | Processing payments, security | Contact, bank and financial information. Sub-processed as necessary for payments. | London-based but international network |
| Kaseya | Staff of our clients | Providing dark web monitoring and phishing training | Contact details, training outcomes | US |
| MailChimp | Data protection mailing list subscribers | Email marketing | Contact details, click-through tracking and mailing management | UK Extension to the EU-U.S. Data Privacy Framework |
| HubSpot | Mailing list subscribers, customers | Email marketing, deal tracking, prospecting | Contact details, opportunities | UK data centre |
| Google Analytics | Website visitors | Website engagement tracking | IP address, activity | UK Extension to the EU-U.S. Data Privacy Framework |
| Exclaimer (Email Signatures) | Anybody in our outbound emails | Adding signatures to our outbound emails | Email contents | Temporarily passed through UK data centre |
| Rewst (under consideration) | Staff of our clients | Process automation, e.g. unit billing synchronisation | Various, e.g. names, email addresses, but not messages or documents. | Temporarily Amazon Web Services US-EAST-2; Ohio, US |
| GoDaddy | Staff of our clients | Logging internet domain registrations | Limited to registrant details | Arizona, US |
| Sign In App | Building visitors | Attendance record for fire safety and general visitor management | Name, photo, purpose of visit | UK data centre |
| Stripe | Staff of clients | Card payment processing | Contact details | UK/International |
| Suppliers N.B. Some will be joint controllers | Staff of our clients | Provision of goods or services | Typically contact information. Depends upon the service | Varies. See ‘International Transfers’ in our privacy notice. |
| Contractor Engineers | Staff and customers of our clients | Administering support processes | Contact details, correspondence, potentially the controller’s customer data | EU |
| Optix Solutions Marketing Agency | Clients engaged in case studies | Promoting Nexus products and services, public relations | Contact details, correspondence | UK-based |
Return to our privacy notice or privacy and data protection advice page
Nexus Customer Data Protection Mailing List
This is our designated means of notifying you of updates to our data protection situation (e.g. new sub-processors).
- Unsubscribe in response to any message
- We need at least one email address per customer
- This is separate to our marketing emails
- Email list admins on dataprotection@nexusos.co.uk
