List of Sub-processors
Last Updated: May 8, 2026
To provide our services, Noxys Security SAS ("Noxys") engages third-party entities to perform various data processing activities on behalf of our customers. Under the GDPR, these entities are known as "sub-processors."
Noxys maintains a strict vetting process for all sub-processors to ensure they provide adequate security and data protection guarantees.
Core Infrastructure
| Entity | Purpose | Location | DPA / Privacy Policy |
|---|---|---|---|
| Scaleway SAS | Primary cloud hosting, managed databases, and object storage. | France (EU) | Link |
| Cloudflare, Inc. | Content Delivery Network (CDN), WAF, and DDoS mitigation. | EU Residency Opted | Link |
Business Operations & Support
| Entity | Purpose | Location | DPA / Privacy Policy |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Subscription billing and payment processing. | Ireland (EU) | Link |
| Resend Labs, Inc. | Transactional email delivery (notifications, auth). | EU Region | Link |
| Sentry.io | Real-time error monitoring and performance tracking. | US (EU-DPA available) | Link |
| Infisical, Inc. | Secrets management and security key orchestration. | US (EU-DPA available) | Link |
Change Notification
Customers can subscribe to receive notifications of any changes to this sub-processor list. Notifications are sent at least 30 days prior to the engagement of any new sub-processor.
To subscribe, please contact privacy@noxys.eu.