What a subprocessor is
A subprocessor is a third party engaged by NEXEFII to process personal data on behalf of our customers, in the context of delivering the platform services — including NEXE Store, Master Control, and Smartbot.
NEXEFII acts as a processor of the data customers enter into the platform; subprocessors act as onward processors, always under instructions and contractual obligations intended to reflect the commitments made to the customer.
How NEXEFII engages subprocessors
NEXEFII engages third parties by service CATEGORY, not indiscriminately. Each category corresponds to an operational function required to deliver the platform. Typical categories include:
- Managed cloud hosting and infrastructure (application runtime, database, and storage).
- Payment processing.
- AI / large language model (LLM) inference, where AI-assisted features are used.
- Transactional communications (for example, system emails and operational notifications).
Payment processor
For payment processing, NEXEFII uses Stripe. This is a fact: Stripe is the payment processor and handles the data needed for billing under its own policies and applicable regulatory obligations.
NEXEFII does not store full card data in its own systems; the payment flow is handled by Stripe as a specialized processor.
Official subprocessor list
The authoritative, named, and current list of subprocessors is NEXEFII's Subprocessor List, still pending DPO confirmation. Until that confirmation, NEXEFII does not publish a complete named list in this document, in order not to assert unverified information.
Once confirmed, the official list will identify each subprocessor, its service category, and the function for which it was engaged.
Data location and regions
The hosting and data-processing regions are managed cloud infrastructure (Railway), pending confirmation. International transfers, where they occur, will rely on the transfer mechanisms described in the Privacy Policy and the Data Processing Addendum.
Changes and notification
NEXEFII intends to maintain a process for communicating relevant changes to the subprocessor list — for example, adding a new subprocessor within a category — so that customers have the opportunity to become aware before the change takes effect.
The specific notification mechanism and any timelines will be formalized in the final version of this document and in the Data Processing Addendum, under legal and DPO review.
Contact
Questions about subprocessors, processing categories, or data location may be sent to contact@nexefii.com.