Subprocessors
Last updated: May 20, 2026
This page lists the providers that process personal data on Nubbo's behalf pursuant to Article 28 of the GDPR. We keep this information public for transparency with our users.
Active subprocessors
| Provider | Purpose | Data transferred | Location | DPA |
|---|---|---|---|---|
| Prisma Data, Inc. | Managed database (Prisma Postgres) that stores the application's data. | User accounts and preferences, encrypted cloud provider credentials, authentication and security tokens, IP addresses and user agents, file metadata from your storage, shared resources and their usage activity, notifications, email and broadcast records, and data export requests. | Primary storage in EU - Germany (Frankfurt, AWS eu-central-1). Operational access from the U.S. covered by Prisma's EU-U.S. Data Privacy Framework certification. | DPA |
| Resend | Sending transactional emails. | Email addresses of users and recipients. | USA (covered by Standard Contractual Clauses). | DPA |
Change notification
If we add a new subprocessor or replace an existing one, we will update this page before the change takes effect. Users can check this page at any time or subscribe to our email notifications by writing to info@nubbo.app.
Providers that are NOT subprocessors
Cloud storage providers (AWS S3, DigitalOcean Spaces, Cloudflare R2, Wasabi, Backblaze B2, etc.) that users connect to Nubbo are not Nubbo's subprocessors. The contractual and data relationship is directly between the user and the provider they choose and configure. Nubbo only acts as an API client against those credentials at the user's instruction.
Contact
For any inquiries about subprocessors or third-party processing, write to info@nubbo.app.