NevTan Sign
NevTan Sign

Subprocessor list

Who helps us deliver NevTan Sign

Nevtan Sign works with a limited number of carefully selected third-party service providers (“Subprocessors”) that assist us in delivering, operating, securing, and supporting our Services.

Effective Date: June 6, 2026 — Last Updated: June 6, 2026. This page provides transparency regarding the third-party providers that may process Customer Data or Personal Data on behalf of Nevtan in connection with the Services. This list should be read together with our Data Processing Addendum (DPA) and Privacy Policy. This list reflects our current production Subprocessors and is updated whenever material changes are made. Enterprise customers may request notification of Subprocessor changes by contacting privacy@nevtan.com.

Jump to a section

What is a subprocessor
Current subprocessors
International transfers
Subprocessor changes
Questions
1. What Is a Subprocessor?

A Subprocessor is a third-party service provider engaged by Nevtan that may process Customer Data or Personal Data in order to support the delivery, operation, security, maintenance, or improvement of the Services.

All Subprocessors are contractually required to implement appropriate security and privacy safeguards. Nevtan remains responsible for Subprocessor performance to the extent required under applicable law.

Before engaging any Subprocessor, Nevtan evaluates:

Security practices and certifications
Privacy controls and data protection commitments
Compliance posture and regulatory standing
Reliability, availability, and incident response capabilities
Contractual obligations including data processing agreements
2. Current Subprocessors

The following list covers all current production Subprocessors used by Nevtan Sign, organized by category.

Amazon Web Services (AWS)
Infrastructure

Cloud hosting, storage, databases, networking, and backup infrastructure underlying the Services

United States; European Union (where selected by customer configuration)
Cloudflare
Infrastructure

Content delivery network (CDN), DDoS protection, DNS management, and web application security

Global edge network
Stripe
Payments

Subscription billing, payment processing, and invoicing. Full payment card data is processed by Stripe directly and is not stored by Nevtan.

Global
Postmark
Email Delivery

Transactional email delivery for notifications, signing requests, and system communications

United States
Sentry
Monitoring

Application error monitoring, diagnostics, and crash reporting to support platform reliability

United States
PostHog
Analytics

Product analytics and usage insights to support platform improvement. Configured to minimize personal data collection.

United States / European Union
Anthropic
AI Services

AI-assisted functionality where AI features are enabled. Customer documents are not used to train public AI models.

United States
Not used to train public AI models
3. International Data Transfers

Some Subprocessors may process Customer Data in countries outside the customer's country of residence. Where required by applicable law, Nevtan implements appropriate safeguards for such international transfers, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
The UK International Data Transfer Addendum where applicable
Contractual data protection obligations imposed on all Subprocessors
Technical and organizational security controls

For further details on international transfer mechanisms, please refer to the Data Processing Addendum.

4. Subprocessor Changes

Nevtan may add, replace, or remove Subprocessors as business, operational, security, or technical requirements evolve. This page is updated to reflect those changes.

Enterprise customers who have executed a Data Processing Addendum with Nevtan may request advance notification of material Subprocessor changes. To register for notifications, contact privacy@nevtan.com. Upon notification, customers with relevant contractual rights may object to a new Subprocessor on data protection grounds within fourteen (14) days of notice.

Customers are encouraged to review this page periodically. The "Last Updated" date at the top of this page reflects the most recent change.

5. Questions

Questions regarding Subprocessors or data processing activities may be directed to:

Related: Trust Center · DPA · Privacy Policy