Draft for review by counsel — not yet in effect.

Subprocessors

These are the companies that handle personal data for Nymbrink. The same list is in Nymbrink’s own signed passport, so a change to one is a change to the other and shows up as one.

Company	What it does	Where	Data
Vercel Inc.	Hosting	EU (Frankfurt, region fra1)	Account data and customer content, in transit
Supabase Inc.	Database and sign-in	EU (Frankfurt)	Account data and customer content
Resend	Email delivery	US	Recipient email addresses and message content

We give at least 30 days’ notice before adding or replacing a subprocessor, by email to business customers and on this page. Transfers to the United States are covered by Standard Contractual Clauses, as set out in the Data Processing Addendum. Questions: privacy@nymbrink.com.