Version 1.0 · Issued 24 May 2026
Sub-processor list
Below are the sub-processors Nure Group Limited uses to operate NureComp. We give existing customers at least 30 days' notice of any addition or replacement of a sub-processor; subscribe to legal@nuregroup.com for change notifications.
| Name | Function | Location | Data accessed | Transfer mechanism |
|---|---|---|---|---|
| Hetzner Online GmbH | Primary hosting (compute, network, storage) | Germany (EU) | All Customer Data at rest and in transit (encrypted) | EU residency — no transfer mechanism needed |
| Cloudflare, Inc. | DNS, edge caching, DDoS protection, TLS termination | Global edge; UK / EU points of presence for our traffic | Request metadata (IP, URL, user agent); TLS-terminated traffic in memory only | EU SCCs + UK IDTA |
| Stripe Payments Europe, Limited | Billing, payment processing, VAT/Tax MOSS | Ireland (EU) | Customer billing details, card last-4, transaction history | EU residency for EU customers; SCCs where transfer required |
| Resend, Inc. | Transactional email delivery | EU / US dual-region | Recipient email, subject, body of transactional emails | EU SCCs + UK IDTA; EU region selected where available |
| Anthropic, PBC | Optional AI features (Pro / Business / Enterprise tiers only) | United States | Prompts and outputs sent only when an admin or learner explicitly invokes an AI feature; tier-gated; per-org cap | EU SCCs + UK IDTA |
| GitHub, Inc. | Source code repository (no production data) | United States | Source code only — does not process Customer Data | N/A — no Customer Data |
Not sub-processors
For clarity, the following services do not process customer Personal Data and are listed for transparency:
- Anthropic for our own product-development use of Claude (separate from the optional in-product AI feature listed above; see the internal AI register)
- HMRC, Companies House — statutory data-sharing only, not sub-processors
Subscribe to changes: legal@nuregroup.com