What a subprocessor is
A subprocessor is a third party engaged by NEXEFII to process personal data on behalf of our customers, in the context of delivering the platform services — including NEXE Store, Master Control, and Smartbot.
NEXEFII acts as a processor of the data customers enter into the platform; subprocessors act as onward processors, always under instructions and contractual obligations intended to reflect the commitments made to the customer.
How NEXEFII engages subprocessors
NEXEFII engages third parties by service CATEGORY, not indiscriminately. Each category corresponds to an operational function required to deliver the platform. Typical categories include:
- Managed cloud hosting and infrastructure (application runtime, database, and storage).
- Payment processing.
- AI / large language model (LLM) inference, where AI-assisted features are used.
- Transactional communications (for example, system emails and operational notifications).
Payment processor
For payment processing, NEXEFII uses Stripe. This is a fact: Stripe is the payment processor and handles the data needed for billing under its own policies and applicable regulatory obligations.
NEXEFII does not store full card data in its own systems; the payment flow is handled by Stripe as a specialized processor.
Official subprocessor list
The authoritative, named, and current list of subprocessors is NEXEFII's Subprocessor List, maintained and published separately by NEXEFII. The subprocessors currently evidenced in the operation of the platform are Stripe, Inc. (payment processing) and Railway (hosting and managed cloud infrastructure). NEXEFII does not presume or publish subprocessors that are not actually used.
The official list identifies each subprocessor, its service category, and the function for which it was engaged; the availability and use of each may depend on the contracted service.
Data location and regions
The hosting and data-processing regions correspond to managed cloud infrastructure (Railway). International transfers, where they occur, will rely on the transfer mechanisms described in the Privacy Policy and the Data Processing Addendum.
Changes and notification
NEXEFII intends to maintain a process for communicating relevant changes to the subprocessor list — for example, adding a new subprocessor within a category — so that customers have the opportunity to become aware before the change takes effect.
Where general authorization applies under the Commercial Agreement, planned additions or replacements of a subprocessor are communicated by a notice to the tenant’s authorized administrator, indicating the purpose, the service or data categories where evidenced, the processing region where verifiable, and the planned date. The notice provides a reasonable opportunity to respond, within the timeframe stated in the notice or set out in the Commercial Agreement; reasoned objections may be sent through the official channel (contact@nexefii.com) while no dedicated administrative interface exists. NEXEFII assesses the objection in good faith, without automatic acceptance and without operationally blocking the service; applicable measures follow the contract, the affected service, and applicable law, as detailed in the Data Processing Addendum. The initial publication of this list, with the already-existing subprocessors, is a disclosure of the current state and not a notice of a future change.
Contact
Questions about subprocessors, processing categories, or data location may be sent to contact@nexefii.com.