Appendix B — Sub-processors and data flows
==========================================
NureComp uses the following sub-processors. Customer organisations
inherit this list and add their own per the multi-domain ROPA.

Sub-processor          | Location | Purpose                       | Transfer mechanism
Hetzner Online GmbH    | DE       | Primary hosting               | Within EEA (no transfer)
Cloudflare, Inc.       | US/EU    | CDN + WAF (data in transit)   | UK IDTA + SCCs
Resend, Inc.           | US       | Transactional email           | UK IDTA + SCCs
Stripe, Inc.           | US/UK    | Payment processing             | UK Stripe entity
Anthropic, PBC         | US       | LLM features (opt-in)         | UK IDTA + SCCs, no training
GitHub, Inc.           | US       | Source code hosting (no PII)  | SCCs

Full sub-processor list: https://nurecomp.eu/legal/sub-processors
