Sub-processors
Last updated: 2026-04-27
Nansy uses a small set of vetted third-party services to operate the platform. This page lists every sub-processor that may handle personal data on behalf of subscribed law firms (the data controllers). We update this list whenever a sub-processor is added, removed, or changes scope.
Core sub-processors (always active)
Required for the platform to function. Subscribing implies acceptance of these.
| Processor | Purpose | Region | DPA |
|---|---|---|---|
| Supabase | PostgreSQL database + authentication | EU (Frankfurt) | View DPA |
| Vercel | Hosting + CDN + edge functions | EU (multi-region) | View DPA |
| Anthropic | Claude AI for the secretary, content drafts, and lead classifier | United States | View DPA |
| Resend | Transactional email delivery | United States | View DPA |
Optional sub-processors (only when activated)
Active only when the firm explicitly turns on the corresponding integration. Disabled by default.
| Processor | Purpose | Region | DPA |
|---|---|---|---|
| Google Workspace | Calendar + Email OAuth integration (per partner) | EU / United States | View DPA |
| Microsoft 365 | Outlook + Calendar OAuth integration (per partner) | EU / United States | View DPA |
| Zoom | Meeting scheduling integration | United States | View DPA |
| Kapso | WhatsApp Business messaging | EU | Pending |
| PostBridge | Social-media post scheduling | United States | Pending |
When we add a new sub-processor, we notify the firm at least 30 days in advance, giving them time to object or migrate.
Questions or objections: privacy@nansy.io