This list was last updated 19th October 2020. In order to obtain the best combination of service, capability and security, we will update our third-party processors from time to time. An updated list will be posted here.

Major changes will be preceded by our own data protection impact assessment.

Sub-Processor Name Data Subjects Processing Purpose Data to be Processed Storage Location
Autotask Staff of our clients Administering sales and support processes Contact details, responsibilities, correspondence UK
IT Glue Staff of our clients Administering support processes Contact details, responsibilities Germany
Microsoft (Office 365 & Dynamics) Staff and customers of our clients; prospects Email, SharePoint development, prospecting, Nexus document storage for performance of a contract Contact details, correspondence, potentially our clients' customer data UK
Finance Software Staff of our clients Financial record-keeping, payments Contact details On premises (UK)
GoCardless (Direct Debit) N.B. as Joint Data Controllers Name/contact details for direct debit account Processing payments, security Contact, bank and financial information. Sub-processed as necessary for payments. London-based but international network
MailChimp Mailing list subscribers Email marketing Contact details, click-through tracking and mailing management US, under standard contractual clauses
Google Analytics Website visitors Website engagement tracking IP address, activity International but under EU-US privacy shield
QA Training (a Nexus partner) Training delegates on QA courses Admin and courseware provision for courses run in partnership with QA Contact details, qualifications & experience Your data will be passed to directly-related third parties as described on the QA website.
Vendors Offering Courses Training delegates on non-QA courses Admin and courseware provision for courses Contact details, qualifications & experience See course notices. Non-EU in some cases.
Sign In App Building visitors Attendance record for fire safety and general visitor management Name, photo, purpose of visit UK data centre
N.B. Some will be joint controllers
Staff of our clients Provision of goods or services Typically contact information. Depends upon the service Varies. See ‘International Transfers’ in our privacy notice.
Contractor Engineers Staff and customers of our clients Administering support processes Contact details, correspondence, potentially the controller’s customer data EU
Chalk + Ward Marketing Agency Mailing list subscribers, social media correspondents, clients engaged in case studies Promoting Nexus products and services, public relations Contact details, correspondence Mailchimp, Microsoft 365


Go to our privacy notice or privacy and data protection advice page.