List of Sub-Processors

Sub Processors

In order to obtain the best combination of service, capability and security, we will update our third-party processors from time to time.

This list was last updated 27th April 2022. Major changes will be preceded by our own data protection impact assessment

Sub-Processor Name Data Subjects Processing Purpose Data to be Processed Storage Location
Autotask (Datto Europe) Staff of our clients Administering sales and support processes Contact details, responsibilities, correspondence UK
CrewHu Staff of our clients Recording support ticket feedback Contact details, feedback US
IT Glue Staff of our clients Administering support processes Contact details, responsibilities Germany
Microsoft (Office 365 & Dynamics) Staff and customers of our clients; prospects Email, SharePoint development, prospecting, Nexus document storage for performance of a contract Contact details, correspondence, potentially our clients' customer data UK
Finance Software Staff of our clients Financial record-keeping, payments Contact details On premises (UK)
GoCardless (Direct Debit) N.B. as Joint Data Controllers Name/contact details for direct debit account Processing payments, security Contact, bank and financial information. Sub-processed as necessary for payments. London-based but international network
InBay Staff of our clients Providing support    
Kaseya Staff of our clients Providing dark web monitoring and phishing training Contact details, training outcomes US
MailChimp Mailing list subscribers Email marketing Contact details, click-through tracking and mailing management US, under standard contractual clauses
Google Analytics Website visitors Website engagement tracking IP address, activity International but under EU-US privacy shield
QA Training (a Nexus partner) Training delegates on QA courses Admin and courseware provision for courses run in partnership with QA Contact details, qualifications & experience Your data will be passed to directly-related third parties as described on the QA website.
Vendors Offering Courses Training delegates on non-QA courses Admin and courseware provision for courses Contact details, qualifications & experience See course notices. Non-EU in some cases.
Sign In App Building visitors Attendance record for fire safety and general visitor management Name, photo, purpose of visit UK data centre
Stripe Staff of clients Card payment processing Contact details UK/International
Suppliers N.B. Some will be joint controllers Staff of our clients Provision of goods or services Typically contact information. Depends upon the service Varies. See ‘International Transfers’ in our privacy notice.
Contractor Engineers Staff and customers of our clients Administering support processes Contact details, correspondence, potentially the controller’s customer data EU
Chalk + Ward Marketing Agency Mailing list subscribers, social media correspondents, clients engaged in case studies Promoting Nexus products and services, public relations Contact details, correspondence Mailchimp, Microsoft 365

Return to our privacy notice or privacy and data protection advice page.

Nexus Customer Data Protection Mailing List

This is our designated means of notifying you of updates to our data protection situation (e.g. new sub-processors).

  • We need at least one email address per customer
  • This is separate to our marketing emails
  • Unsubscribe in response to any message
  • Email list admins on

Subscribe to Nexus Data Protection Notifications

* indicates required