Subprocessors

Applies to NimbusDash and NimbusQL

Last updated: September 30, 2026

See also our NimbusAI Data Handling page and our Data Processing Agreement.

This page lists the third parties that process customer data on NimbusLabs' behalf in providing NimbusDash and NimbusQL, and what each one processes. It is the list our Data Processing Agreement refers to. It does not list the vendors that support NimbusLabs' own website, store or billing, which the Privacy Policy covers.

Both applications run inside your NetSuite account, and NimbusLabs has no access to it except what your administrator gives a named person for a support task. This page covers the processing that NimbusAI and support involve. What leaves your account for it is the content NimbusAI sends on the provider included with your license, which passes through NimbusLabs' Azure gateway to the model service, the usage records the licensing platform keeps of those requests, and anything your users send NimbusLabs with a support request or a support task requires, which arrives in NimbusLabs' support email. The license, acceptance and notice records the applications send to run your license are described in our Privacy Policy. Requests you send to your own OpenAI or Anthropic key go directly from your NetSuite account to that provider under your own agreement with it, and that provider is not a NimbusLabs subprocessor. What NimbusAI sends, and what is kept, is on our NimbusAI Data Handling page.

Current subprocessors

Microsoft Azure / Azure OpenAI (Microsoft Foundry)

  • Entity: Microsoft Corporation
  • Purpose: AI model inference, the API gateway that carries requests to it, and that gateway's telemetry
  • Processing region: United States (Azure US Data Zone)
  • Primary Azure resource region: West US 3

Processes the content NimbusAI sends on the included provider, on NimbusLabs' own Azure subscription, under Microsoft's Product Terms and Data Protection Addendum. The gateway is configured to record no request or response bodies.

Microsoft 365 (Exchange Online)

  • Entity: Microsoft Corporation
  • Purpose: hosting NimbusLabs' email, including the support mailbox that receives support requests
  • Data processed: screenshots, exports, copies of records and other content customers send with a support request, and the correspondence it arrives with
  • Data location: United States, Microsoft's committed geography for Exchange Online data at rest
  • Mail filtering: Exchange Online Protection, currently in the United States, without a location commitment from Microsoft

Hosts NimbusLabs' email under Microsoft's Product Terms and Data Protection Addendum. Content sent with a support request is deleted from NimbusLabs' active mailboxes and permitted working copies within 90 days after the request is resolved, or sooner as the Data Processing Agreement sets out; a deleted item can remain recoverable in the email service for a time afterward, as section 10.3 of that agreement describes.

Amazon Web Services

  • Entity: Amazon Web Services, Inc.
  • Purpose: hosting NimbusLabs' licensing platform and its usage ledger
  • Data processed: usage records of included-provider requests (account number, identifiers, token counts, cost, status and times) and other platform data; AI content is not routed to this platform
  • Hosting region: United States, us-west-2 (Oregon)

Hosts the platform under the AWS Customer Agreement and its Data Processing Addendum.

How you are told of changes

When NimbusLabs adds or replaces a subprocessor, it emails the notice address of every customer whose agreement incorporates the Data Processing Agreement, and this page changes: the "Last updated" date above moves, the new entry appears here, and the change history below says what changed. Both happen at least 30 days before the new subprocessor first processes customer data. The notice names the subprocessor, its purpose, where it processes, and how to object; the Data Processing Agreement sets out the objection right.

Change history

DateChange
September 30, 2026First publication, listing Microsoft for NimbusAI's included provider and for the email that receives support requests, and Amazon Web Services for the licensing platform. The Microsoft 365 and AWS entries record existing arrangements, not new ones: NimbusLabs' email and its platform were hosted there before this list existed.