Subprocessor List
Third-party service providers who process data on our behalf.
1. Introduction
This page lists the sub-processors that NexusRMS Limited (Company No. 16170889) uses to provide our Service. Sub-processors are third-party service providers who process personal data on our behalf to help deliver our rental management platform.
In accordance with our Data Processing Agreement, we will notify customers at least 30 days before engaging a new sub-processor.
2. Current Sub-processors
2.1 Infrastructure & Hosting
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | CDN, DDoS protection, DNS, SSL/TLS, Turnstile bot protection | Global (EU data processing available) |
2.2 Payment Processing
| Provider | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, invoice payments | USA (EU SCCs in place) |
2.3 Communication Services
| Provider | Purpose | Location |
|---|---|---|
| Postmark (ActiveCampaign, LLC) | Transactional email delivery | USA (EU SCCs in place) |
2.4 Optional Tenant-Configured Integrations
The following services may process data only if individually enabled by customers through their account settings. These are optional integrations:
| Provider | Purpose | Location |
|---|---|---|
| Intuit QuickBooks | Accounting software sync (if enabled) | USA (EU SCCs in place) |
| Xero Limited | Accounting software sync (if enabled) | New Zealand/UK |
| Sage Group plc | Accounting software sync (if enabled) | United Kingdom |
| Google LLC | Calendar sync for Freelancer Nodes (if enabled) | USA (EU SCCs in place) |
| Microsoft Corporation | Outlook calendar sync for Freelancer Nodes (if enabled) | USA (EU SCCs in place) |
3. Self-Hosted Services
The following services are self-hosted on our own infrastructure and do not involve third-party data processing:
- Laravel Reverb: Real-time WebSocket notifications (self-hosted)
- Ollama: AI-powered chat assistant (self-hosted, no external API calls)
- ML Prediction Service: Machine learning predictions (self-hosted)
- PostgreSQL: Primary database (self-hosted)
- Redis: Caching and queues (self-hosted)
4. Data Processing Locations
Our primary data processing occurs on self-hosted infrastructure. Where sub-processors are located outside the UK, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs): Approved by the European Commission
- UK International Data Transfer Agreement (IDTA): For UK-specific transfers
- Adequacy Decisions: Where applicable
5. Sub-processor Changes
5.1 Notification Process
We will notify customers of new sub-processors at least 30 days before they begin processing data:
- Email notification to the account owner
- Update to this sub-processor list
- Notice in the customer dashboard
5.2 Objection Process
If you object to a new sub-processor, you may:
- Contact us within 14 days of notification at [email protected]
- Explain your concerns regarding the sub-processor
- We will work with you to address concerns or find alternatives
- If we cannot resolve the objection, you may terminate affected services
6. Historical Changes
| Date | Change | Sub-processor |
|---|---|---|
| January 2026 | Initial list published | All current sub-processors |
7. Questions
For questions about our sub-processors or data processing practices:
NexusRMS Limited
Company Registration No. 16170889 (England and Wales)
Registered Address: The Gables, Westhope, Hereford, Herefordshire, HR4 8BL, United Kingdom
Email: [email protected]
Data Protection Officer: [email protected]
Questions about this document?
If you have any questions about this Subprocessor List, please contact us at [email protected]