Last updated: 13 May 2026
Sub-processors are third-party services that process personal data on behalf of Nodebrush. Under Article 28 of the GDPR, we publish this list so our clients and visitors can see who has access to data we handle on their behalf, and when that changes.
Current sub-processors
- Vercel Inc. (USA, function region Stockholm) — hosts the public website and the CMS admin. Data Processing Addendum.
- Hetzner Online GmbH (Falkenstein, Germany) — hosts the Postgres database and the Garage S3 storage that backs media uploads. Data Processing Agreement.
- Twilio Inc. — SendGrid (USA) — delivers transactional email, including contact form submissions and customer confirmations. Data Processing Addendum.
- Google LLC (USA, EU representative: Google Ireland Ltd.) — provides reCAPTCHA Enterprise for bot protection on the contact form, and Google Maps tiles where the site renders a map. Data Processing Addendum.
Changes to this list
When a sub-processor is added, removed, or changed, this page is updated and the date above is bumped. Clients with a signed agreement are responsible for monitoring this page; the agreement defines the objection window and procedure if you do not consent to a change.









