Sub-processors
Last updated: 2026-07-27
These are the third-party service providers that may process data on our behalf in order to run NIS2Fill. We keep this page current because your own customers and auditors will ask for it - the same way you use this tool to answer their questions.
Current sub-processors
| Provider | What it does | Data it can access | Where |
|---|---|---|---|
| Supabase (Supabase Inc., hosted on AWS) | Database, authentication and file storage - the application's primary data store | All account and questionnaire data | EU - AWS eu-west-1 (Ireland) |
| Vercel (Vercel Inc.) | Application hosting and delivery | Data in transit through the application; request logs | EU region with global edge network; company established in the USA |
| OpenAI (OpenAI, L.L.C.) | Generates draft answers and text embeddings for matching questions to your stored answers | Questionnaire question text and the stored answers used to draft a response | USA |
Notification of changes
If we add or replace a sub-processor that processes customer data, we will update this page and notify account administrators by email at least 30 days before the change takes effect, so you have time to object.
If you object on reasonable data-protection grounds, contact us at dev.app.nis2@gmail.com and we will work with you to find a solution; if we cannot, you may terminate and export your data.
Safeguards for transfers outside the EU
Application data is stored in the EU (Ireland). OpenAI processes data in the USA and Vercel is US-established. For those transfers we rely on the European Commission's Standard Contractual Clauses and each provider's Data Processing Addendum, and where applicable the EU, US Data Privacy Framework.
Legal
Questions about this page? dev.app.nis2@gmail.com