Legal · Sub-processors
Sub-processors
Third-party services that process Nulera customer data. We disclose every sub-processor by name, country, and purpose. New sub-processors are listed here before they go live.
Last updated: June 5, 2026. Email aguvaitkus@gmail.com for advance notice of changes or to request a Data Processing Agreement.
| Sub-processor | Purpose | Country |
|---|---|---|
| Vercel | Hosting, serverless functions, edge middleware | United StatesDPF-certified |
| Vercel Blob | File attachment storage (resumes, etc) | United StatesDPF-certified (Vercel) |
| Vercel Analytics | Page-view counts in cookieless mode (no IP retention beyond aggregation) | United StatesDPF-certified (Vercel) |
| Neon | PostgreSQL database (US-East region) | United StatesStandard Contractual Clauses available |
| Resend | Transactional email (verification, password reset, digest notifications) | United StatesDPF-certified |
| OAuth sign-in (account linking); Gmail send + Google Calendar (only when you connect Google in Settings) | Global infrastructureDPF-certified for EU data | |
| Google Gemini (via Vercel AI Gateway) | AI inference for draft and prep suggestions. Processes the text those features use (resume, cover letter, target roles, job/contact details) only when you invoke an AI feature, routed only to providers that don't use it to train their models. Google may retain it up to 55 days for abuse monitoring, not training. | United States / Global infrastructureDPF-certified for EU data (Google) |
International data transfers
Customer data is stored in Neon's US-East region. Sub-processors located in the United States operate under the EU-US Data Privacy Framework (DPF), which the European Commission has determined provides an adequate level of protection for personal data transferred from the EU. For sub-processors not yet DPF-certified (or for non-EU data transfers), we rely on Standard Contractual Clauses where required.
Notice of changes
When we add a new sub-processor that processes customer data, we update this page before the change goes live and send notice to users who have requested advance notification. To subscribe, email aguvaitkus@gmail.com.
See also: Privacy Policy.