25+ Years of Experience
Fixed Service Pricing
24/7 Monitoring
2500+ Fully Managed Users
25+ Years of Experience
Fixed Service Pricing
24/7 Monitoring
2500+ Fully Managed Users
In order to obtain the best combination of service, capability and security, we will update our third-party processors from time to time.
This list was last updated February 2025. Major changes will be preceded by our own data protection impact assessment
| Sub-Processor Name | Data Subjects | Processing Purpose | Data to be Processed | Storage Location |
|---|---|---|---|---|
| Autotask UK | Staff of our clients | Administering sales and support processes | Contact details, responsibilities, correspondence | UK |
| CrewHu | Staff of our clients | Recording support ticket feedback | Contact details, feedback | US under Privacy Shield |
| Eventbrite | Event registrants | Managing event attendees | Contact details, payments | US under the UK Extension to the EU-U.S. Data Privacy Framework |
| IT Glue | Staff of our clients | Administering support processes | Contact details, responsibilities | Germany |
| Microsoft (Office 365, Dynamics, Entra ID) | Staff and customers of our clients; prospects | Email, SharePoint development, prospecting, Nexus document storage for performance of a contract, access control | Contact details, correspondence, potentially our clients’ customer data | UK |
| Finance Software (Sage, Quickbooks) | Staff of our clients | Financial record-keeping, payments | Contact details | UK data centre |
| GoCardless (Direct Debit) N.B. as Joint Data Controllers | Name/contact details for direct debit account | Processing payments, security | Contact, bank and financial information. Sub-processed as necessary for payments. | London-based but international network |
| Kaseya Tools (Other) | Staff of our clients | Providing dark web monitoring and phishing training, cyber security and IT support | Contact details, training outcomes | US |
| MailChimp | Data protection mailing list subscribers | Email marketing | Contact details, click-through tracking and mailing management | US under the UK Extension to the EU-U.S. Data Privacy Framework |
| HubSpot | Mailing list subscribers, customers | Email marketing, deal tracking, prospecting | Contact details, opportunities | UK data centre |
| Google Analytics | Website visitors | Website engagement tracking | IP address, activity | US under the UK Extension to the EU-U.S. Data Privacy Framework |
| Exclaimer (Email Signatures) | Anybody in our outbound emails | Adding signatures to our outbound emails | Email contents | Temporarily passed through UK data centre |
| Nexus WorkplaceGPT | Depends on data fed into Nexus AI tools | Determined by end user/organisation | Determined by end user/organisation | Azure UK data centres or Open AI US under SCCs depending on AI model selection. |
| Rewst | Staff of our clients | Process automation, e.g. unit billing synchronisation | Various, e.g. names, email addresses, but not messages or documents. | Temporarily Amazon Web Services US-EAST-2; Ohio, US. UK Extension to the EU-U.S. Data Privacy Framework. |
| GoDaddy | Staff of our clients | Logging internet domain registrations | Limited to registrant details | Arizona, US. UK Extension to the EU-U.S. Data Privacy Framework. |
| Sign In App | Building visitors | Attendance record for fire safety and general visitor management | Name, photo, purpose of visit | UK data centre |
| Stripe | Staff of clients | Card payment processing | Contact details | UK/International |
| Suppliers N.B. Some will be joint controllers | Staff of our clients | Provision of goods or services | Typically contact information. Depends upon the service | Varies. See ‘International Transfers’ in our privacy notice. |
| Contractor Engineers | Staff and customers of our clients | Administering support processes | Contact details, correspondence, potentially the controller’s customer data | EU |
| Exposure Ninja Marketing Agency | Clients engaged in case studies | Promoting Nexus products and services, public relations | Contact details, correspondence | International |
| Nexus AI Call Agent (Open AI, Twilio) | Clients calling in | AI handling of phone calls | Speech snippets, support ticket information | US under Standard Contractual Clauses (SCCs) |
Return to our privacy notice or privacy and data protection advice page
This is our designated means of notifying you of updates to our data protection situation (e.g. new sub-processors).
“Nexus Open Systems Ltd demonstrated an excellent track record delivering innovative IT services and cloud solutions while exceeding customer expectations.”
Cloudtango industry review 2024
