Trust Centre
Sub-processor register
Every third party that helps run Nuromi, what it does, where it operates, and its certifications.
Nuromi uses seven sub-processors: Supabase (database and vault, Sydney), Anthropic (AI analysis, zero data retention requested on every call), Deepgram (voice-note transcription, zero data retention, only when a customer has voice notes enabled), Stripe (payments, PCI DSS Level 1), Vercel (hosting), Nango (connector OAuth), and Resend (transactional email). Each receives only what it needs to do its job.
| Sub-processor | Purpose | Region | Certifications |
|---|---|---|---|
| Supabase | Database, authentication, and encrypted credential vault | Sydney, Australia (AWS ap-southeast-2) | SOC 2 Type II (infrastructure) |
| Anthropic | AI models for insights, summarisation, and document reading, with zero data retention requested on every call | United States | Does not train on customer data |
| Deepgram | Voice-note transcription with zero data retention, only when a customer has voice notes enabled | United States | Not applicable |
| Stripe | Payment processing and billing. Card details never touch Nuromi | United States (global processing network) | PCI DSS Level 1 |
| Vercel | Application hosting and edge delivery | Sydney edge (Australian customers) | Not applicable |
| Nango | OAuth connection management for connected accounting, payroll, and other systems | United States | Not applicable |
| Resend | Transactional email: sign-in links, invites, and receipts | United States | Not applicable |
We keep this register current. Customers can request advance notification of changes to our sub-processors by emailing hello@nuromi.ai. For how these vendors fit into our overall posture, see the Trust Centre and the privacy policy.