This list was last updated 27th April 2022. Major changes will be preceded by our own data protection impact assessment
| Sub-Processor Name | Data Subjects | Processing Purpose | Data to be Processed | Storage Location |
| Autotask (Datto Europe) | Staff of our clients | Administering sales and support processes | Contact details, responsibilities, correspondence | UK |
| CrewHu | Staff of our clients | Recording support ticket feedback | Contact details, feedback | US |
| IT Glue | Staff of our clients | Administering support processes | Contact details, responsibilities | Germany |
| Microsoft (Office 365 & Dynamics) | Staff and customers of our clients; prospects | Email, SharePoint development, prospecting, Nexus document storage for performance of a contract | Contact details, correspondence, potentially our clients’ customer data | UK |
| Finance Software | Staff of our clients | Financial record-keeping, payments | Contact details | On premises (UK) |
| GoCardless (Direct Debit) N.B. as Joint Data Controllers | Name/contact details for direct debit account | Processing payments, security | Contact, bank and financial information. Sub-processed as necessary for payments. | London-based but international network |
| Kaseya | Staff of our clients | Providing dark web monitoring and phishing training | Contact details, training outcomes | US |
| MailChimp | Mailing list subscribers | Email marketing | Contact details, click-through tracking and mailing management | US, under standard contractual clauses |
| Google Analytics | Website visitors | Website engagement tracking | IP address, activity | International but under EU-US privacy shield |
| Exclaimer (Email Signatures) | Anybody in our outbound emails | Adding signatures to our outbound emails | Email contents | Temporarily passed through UK data centre |
| Vendors Offering Courses | Training delegates on non-QA courses | Admin and courseware provision for courses | Contact details, qualifications & experience | See course notices. Non-EU in some cases. |
| Sign In App | Building visitors | Attendance record for fire safety and general visitor management | Name, photo, purpose of visit | UK data centre |
| Stripe | Staff of clients | Card payment processing | Contact details | UK/International |
| Suppliers N.B. Some will be joint controllers | Staff of our clients | Provision of goods or services | Typically contact information. Depends upon the service | Varies. See ‘International Transfers’ in our privacy notice. |
| Contractor Engineers | Staff and customers of our clients | Administering support processes | Contact details, correspondence, potentially the controller’s customer data | EU |
| Chalk + Ward Marketing Agency | Mailing list subscribers, social media correspondents, clients engaged in case studies | Promoting Nexus products and services, public relations | Contact details, correspondence | Mailchimp, Microsoft 365 |
Return to our privacy notice or privacy and data protection advice page
Nexus Customer Data Protection Mailing List
This is our designated means of notifying you of updates to our data protection situation (e.g. new sub-processors).
- Unsubscribe in response to any message
- We need at least one email address per customer
- This is separate to our marketing emails
- Email list admins on dataprotection@nexusos.co.uk
