Iris Subprocessors
Last updated: 14 July 2026
What this page is
Nomad AI Ltd uses the following third-party service providers ("subprocessors") to operate Iris. Each processes data only for the purpose listed, under contract and appropriate safeguards. Where a provider processes data in the United States, transfers are covered by the EU Standard Contractual Clauses (SCCs) or an equivalent lawful mechanism.
| Subprocessor | Purpose | Region |
|---|---|---|
| Vercel | Application hosting, compute, and file storage for uploaded attachments (compute in London; file storage in Dublin) | EU / US (SCCs) |
| Neon | PostgreSQL database — workspace data and search index | UK (AWS London) |
| WorkOS | Authentication and single sign-on | US (SCCs) |
| Railway | Hosting for our OAuth connection service (operated by us; tokens encrypted at rest) | EU / US (SCCs) |
| Unstructured | Document text extraction and OCR for uploaded and connected-source files | US (SCCs) |
| Voyage AI | Text embeddings for document search (API data is not used to train models) | US (SCCs) |
| Anthropic | Generating grounded answers over your indexed documents in knowledge search (API data is not used to train models) | US (SCCs) |
| Stripe | Billing and payments | EU / US (SCCs) |
| Resend | Transactional email (invites, notifications) | EU / US (SCCs) |
| Liveblocks | Real-time collaboration (presence, co-editing) | EU / US (SCCs) |
| Twilio | Telephony for click-to-call — only where an organisation enables it | US (SCCs) |
| Sentry | Error monitoring and diagnostics | EU / US (SCCs) |
Connected sources are not subprocessors
Google Workspace and Microsoft 365 are your organisation's own providers. When a workspace admin connects one, Iris reads the selected folders on your organisation's instruction. The same applies to optional integrations that connect your organisation's own accounts — email, calendar, and e-signature providers. See the privacy policy for exactly what is accessed and how it is protected.
Changes
We update this page before adding or replacing a subprocessor that processes customer data; material changes are communicated to workspace administrators. Questions: privacy@nomad.sc.