Sub-Processors
Customer data is handled exclusively in volatile memory and is never transmitted to sub-processors for storage or processing. Only capsule metadata (IDs, timestamps, API key hashes, CDPs, and billing data) is persisted.
1. Current Sub-Processors
| Sub-Processor | Entity | Purpose | Location | Data Handled |
|---|---|---|---|---|
| Google Cloud Platform | Google LLC | Cloud Run compute | us-central1 (US) | Volatile memory only during capsules |
| Neon | Neon Inc. | Serverless PostgreSQL | US | Metadata only (IDs, timestamps, API key hashes, CDPs, verification keys, billing) |
| Stripe | Stripe, Inc. | Payment processing | US | Billing data only (email, tier, usage counts) |
| Cloudflare | Cloudflare, Inc. | DNS + docs hosting | Global CDN | Static docs pages only |
| Spaceship | Namecheap SaaS | Domain + email | US | Domain registration + business email only |
2. Certifications and Compliance
| Sub-Processor | Certifications |
|---|---|
| Google Cloud Platform | SOC 1/2/3, ISO 27001/27017/27018, HIPAA, FedRAMP, PCI DSS |
| Neon | SOC 2 Type II, ISO 27001 |
| Stripe | PCI DSS Level 1, SOC 1/2, ISO 27001 |
| Cloudflare | SOC 2 Type II, ISO 27001, PCI DSS |
| Spaceship | ICANN Accredited |
3. Architecture Note
Nanorix uses ephemeral processing: customer data enters a sealed environment backed by volatile memory, is processed according to customer-provided commands, and is destroyed through a multi-step cryptographic destruction sequence. Customer data never leaves volatile memory and is never transmitted to any sub-processor for storage. The Cryptographic Destruction Proof (CDP) generated at capsule termination contains only cryptographic hashes — no customer data.
4. Change Notification
Nanorix will notify customers at least 30 days before engaging a new sub-processor or materially changing how an existing sub-processor is used. Customers may object to a new sub-processor, in which case either party may terminate the agreement as described in the Data Processing Agreement.
5. Contact
For sub-processor inquiries: hello@nanorix.io
Nanorix Inc.
Patent Pending