Last updated / 25 October 2026

Subprocessors

NamePurposeDataLocationTransfer mechanism
Cloudflare, Inc.Hosting, edge processing worldwide, storageAll service dataStorage in the EU jurisdiction (D1, Durable Objects); edge processing worldwideCloudflare DPA with SCCs: EU Standard Contractual Clauses for restricted transfers (section 6.2); Cloudflare also relies on the EU-U.S. Data Privacy Framework (section 6.4). Cloudflare DPA
Resend, Inc. (US)Transactional email: portal sign-in codes and alertsPortal user email address and messageUSEU Standard Contractual Clauses in Resend's DPA (section 6.2), part of Resend's terms of service. Resend is also certified under the EU-U.S. Data Privacy Framework (section 11). Resend DPA

Visitor data from your site is not sent to Resend.

Change notices

To be told before a subprocessor is added or changed, email privacy@nolgard.com. See also the DPA and security.