- Status:
- Published
- Version:
- 2026-09-05
- Last reviewed:
- 5 September 2026
- Effective from:
- 5 September 2026
Subprocessors
How subprocessors are used
Where nexroom acts as processor, the providers below may process personal data for the stated functions. nexroom must have a written agreement with each subprocessor and remains responsible to the Customer for performance of their data-protection obligations.
Current provider list
The following providers are used to deliver the service.
- Supabase: Database, authentication and file storage; account, organisation, Room, solution, case and log data.
- Vercel: Web hosting, serverless functions, CDN and technical request and operations logs.
- Resend: Transactional and case email; sender, recipient, message, quote/case data and delivery metadata.
Changes and objections
nexroom notifies the Customer's registered contract contact by email at least 30 days before a new subprocessor starts processing personal data, unless a shorter period is required to address a security risk, legal requirement or urgent service disruption. The current list and change date are also published here.
During the notice period, the Customer may object in writing to the contact form at nexroom.app/kontakta-oss on documented data-protection grounds. The parties must seek a reasonable solution. If a material risk cannot be resolved, the Customer may terminate the affected service component before the change takes effect without charge for the remaining term of that component.