Subprocessors
Last updated 2026-10-08 · the providers that process account data for us
Nexus Studio runs on your machines, and your tests and evidence stay on your machines and reach us only if you send them. The account portal, the license check and this website do run on our side, with the providers below. Each one receives only what its job needs. What we keep ourselves, and for how long, is in the Privacy Policy.
Cloudflare and Resend process this data only on our instructions. Stripe processes it for us and also, as a controller in its own right, for fraud prevention and to meet its legal duties, under its own privacy policy. Google and GitHub are not our processors: if you choose to sign in with them, they handle your account with them under their own terms and privacy policies, and send us only what this page lists.
The list
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Cloudflare | Delivery of this website from our own server through Cloudflare's network; hosting of the account portal and the license servers; the database; request logs. | The IP address and headers of every request to us; everything in the database the Privacy Policy lists, such as your email, your license records and the hashes of your keys and machines. | Database: Eastern North America (United States). Portal and license servers: Cloudflare's global network. Website: our own server, delivered through Cloudflare's network. |
| Stripe | Payments: checkout, subscriptions, invoices, receipts, the billing portal, tax. | Your email and account ID from us; your card, billing address and any tax ID straight from you. We never see or store your card. Stripe tells us your customer and subscription IDs, the payment status and the date you have paid until. | United States |
| Resend | Transactional email: sign-in links, trial and renewal reminders, notices about your plan, license and account. | The recipient address and the message. When you apply to the Founding Customer Program, the message we send ourselves contains the fields of your application. We send no marketing email. | United States |
| Sign in with Google, only if you choose it. | The sign-in request. It returns your email address and your Google account ID, and nothing else. | United States | |
| Google (Gmail) | Our business mailboxes: support, privacy, security, sales and hello at sentinel-nexusstudio.com, which Cloudflare Email Routing forwards to a Gmail account. | What you write to us and your email address; the copy of each Founding Customer Program application that we email ourselves. | United States |
| GitHub | Sign in with GitHub, only if you choose it. | The sign-in request. We ask GitHub for read access to your profile and email addresses, and keep only your GitHub account ID and your verified primary email address. | United States |
Providers you connect are yours, not ours
The Studio can use services you configure on your own machine: an AI provider (Ollama on your own hardware, the Anthropic or OpenAI APIs or an endpoint compatible with them, or a command-line tool such as Claude Code, Codex, Gemini CLI or opencode), and Jira, Slack or Telegram. They are not our subprocessors. The Studio talks to them straight from your machine, with your own account and keys, under your agreement with them, and nothing of it passes through us.
Changes
We update this page before a new provider starts processing account data, and email account holders when a change affects them.
Questions: [email protected].