Nerve Core
The Company AI Brain
 Home
Compliance

Subprocessors

Last updated May 27, 2026

Nerve Core uses a small number of trusted third-party providers (subprocessors) to deliver the platform. This page lists them, what they do, and where they are based. We update it when our processors change.

Overview

Each subprocessor is bound by a written contract that requires data-protection obligations no less protective than the ones in our Data Processing Addendum. We perform diligence on each provider before onboarding and review them periodically.

Customers who would like to receive advance notice of new subprocessors can subscribe by emailing privacy@nervecore.io with the subject "Subprocessor updates."

Infrastructure and hosting

ProviderPurposeRegionPolicy
Vercel, Inc.Web hosting, edge delivery, analyticsUnited StatesPrivacy
Railway Corp.Application hosting and database servicesUnited StatesPrivacy
Cloudflare, Inc.DNS, CDN, edge securityUnited StatesPrivacy

AI inference providers

These providers receive prompts that Nerve Core runs on a customer's behalf and return the public outputs that those assistants generate. We use API tiers and configuration options that limit retention and training where the provider offers them.

ProviderPurposeRegionPolicy
OpenAI, L.L.C.Prompt submission and response collection for ChatGPT and API-based generationUnited StatesPrivacy
Anthropic, PBCPrompt submission and response collection for ClaudeUnited StatesPrivacy
Perplexity AI, Inc.Prompt submission and citation collection for PerplexityUnited StatesPrivacy
Google LLCPrompt submission and response collection for Gemini, Google Fonts deliveryUnited StatesPrivacy

Operational tools

ProviderPurposeRegionPolicy
Stripe, Inc.Payment processing and billingUnited StatesPrivacy
Resend, Inc.Transactional and waitlist email deliveryUnited StatesPrivacy
Slack Technologies, LLCInternal team communication and customer reporting channelsUnited StatesPrivacy
GitHub, Inc.Source code managementUnited StatesPrivacy

Notifications and updates

We add new subprocessors as the service evolves. Per the DPA, customers receive at least 30 days' notice of additions and may object on reasonable data-protection grounds during that window. This page reflects the current set. The "Last updated" date at the top is the source of truth.

NoteThe names and roles above describe the production processing chain for the platform. We may use additional vendors for non-customer-data purposes (such as accounting, payroll, and corporate IT) that are not relevant to this list.