To operate our service we rely on carefully selected service providers (processors), such as hosting and infrastructure providers and providers of the AI models used to generate reply drafts. These providers act only on our documented instructions and are bound by data processing agreements pursuant to Art. 28 GDPR; for optional integrations that are not yet active (see Nango below), the data processing agreement is concluded before first activation.

We only engage processors that provide sufficient guarantees of appropriate technical and organisational measures and, where relevant, EU/EEA-based processing.

We currently engage the following sub-processors for customer data:

Hetzner Online GmbH (Germany) — hosting and infrastructure (data centre Falkenstein, Germany, EU)
Anthropic PBC (USA) — AI analysis and reply drafts (EU Standard Contractual Clauses)
Microsoft Ireland Operations Ltd. (EU) — Microsoft 365 / mailbox connection
Nango (USA) — optional integration platform for CRM connections; only used once a customer activates CRM synchronisation, with a data processing agreement concluded before activation. Only the correspondent’s company domain and aggregated statistics are transmitted — no email content, names or addresses.

The customer’s own CRM system (e.g. HubSpot) is not a sub-processor of NCX: where CRM synchronisation is activated, it receives data on the customer’s instruction and under the customer’s own contract with that vendor.

In addition, we use service providers of our own that have no access to the customer data described above:

GoCardless Ltd. (United Kingdom) — connection of our own business bank account for payment reconciliation; processes no data from customer mailboxes (the UK is covered by an EU adequacy decision)

Privacy Policy