Legal
Sub-processors
Last updated · July 2026
Sub-processors
This page lists the sub-processors Sendnord uses to process Customer Data on behalf of our customers, as defined in our Data Processing Agreement. We notify account owners by email and update this page at least 14 days before adding or replacing a sub-processor. Customers may object as described in the DPA.
| Sub-processor | Purpose | Entity & location |
|---|---|---|
| Leaseweb | Application, database and mail-sending infrastructure hosting | Leaseweb Deutschland GmbH, EU datacenter, Germany |
| Vercel | Application hosting (static assets and server-side rendering) | Vercel Inc.; Customer Data processed within the EU; EU Standard Contractual Clauses / EU-US Data Privacy Framework apply |
| Cloudflare | DNS, content delivery and object storage for media and assets | Cloudflare, Inc.; Customer Data stored under Cloudflare's EU jurisdiction controls; SCCs / EU-US Data Privacy Framework apply to any residual transfer |
| Google Cloud (Vertex AI / Gemini Enterprise Agent Platform) | AI model inference for AI features (content assistance, send-time optimization, insights) | Google Cloud EMEA Ltd (Ireland); AI inference performed within the EU; contractual prohibition on training with customer data (Google Cloud Service Specific Terms, Training Restriction); prompt caching/logging disabled where the platform allows |
Customer Data is processed within the EU/EEA. Where a provider is headquartered outside the EU, we engage it only where processing takes place inside the EU, or under safeguards that meet EU requirements: an adequacy decision, the EU Standard Contractual Clauses, or the EU-US Data Privacy Framework: so that Customer Data receives the same level of protection required within the EU.
Not sub-processors
For transparency, the following providers are not sub-processors of Customer Data:
- MaxMind (GeoIP2): geolocation runs against a local database on our own infrastructure. No IP address or other personal data is ever sent to MaxMind.
- Stripe: processes payments for Sendnord's own billing, where Sendnord acts as controller. Stripe never receives Customer Data.
- Network and IP-address providers (transit, IP leasing such as IPXO): provide connectivity and address space only and do not process Customer Data content on our behalf.
Change log
| Date | Change |
|---|---|
| 2026-07-17 | Initial publication |
Questions: privacy@sendnord.com.
This page is provided for general information and is not legal advice.