Sub-processors
Last updated: 10 May 2026
Nscale Limited and its affiliated entities ("Nscale", "we") engage trusted third-party sub-processors to help deliver our services to customers. This page lists the sub-processors currently authorised to process personal data on our behalf.
Our commitments
- Each sub-processor is bound by a written agreement imposing data protection obligations equivalent to those Nscale owes to its customers under applicable Data Processing Agreements.
- Where a sub-processor processes personal data outside the UK or EEA, we rely on appropriate Chapter V GDPR safeguards (typically the EU Standard Contractual Clauses 2021/914 and/or the UK International Data Transfer Agreement / Addendum).
- We maintain ISO 27001-aligned controls over sub-processor selection, due diligence, and ongoing monitoring.
Notification of changes
We will provide reasonable advance notice of any intended addition or replacement of a sub-processor involved in processing Customer Personal Data by updating this page or notifying subscribed customers directly.
If you object to a proposed sub-processor on reasonable data-protection grounds, please contact us within the 30-day notice period at privacy@nscale.com.
Current sub-processors
Infrastructure & data centre operations
| Sub-processor |
Service |
Location |
Transfer safeguard |
| Forus Industry Arena AS |
Colocation operator (STA01) |
Norway |
N/A (EEA) |
| Caverion Norge AS |
Site sub-contractor (STA01) |
Norway |
N/A (EEA) |
| Verne Global EHF |
Colocation operator (KEF01) |
Iceland |
N/A (EEA) |
| Borealis Services ehf |
Colocation operator (BLO1) |
Iceland |
N/A (EEA) |
| Odin Green DC AS |
Colocation operator (OSL1) |
Norway |
N/A (EEA) |
| Enovum NC-1 Bidco, LLC |
Colocation operator (NC01) |
US (Montreal) |
SCCs / UK IDTA |
| VIRTUS London 14 Limited |
Colocation operator |
UK |
N/A (UK) |
| Start Campus |
Colocation operator (SIN01) |
Portugal |
N/A (EEA) |
| Hscale / Ofar |
Facility operations (Hønefoss / Iceland) |
Norway / Iceland |
N/A (EEA) |
| Securitas AB / Securitas Inc. |
Physical security services |
Sweden / US |
SCCs (US ops) |
Platform, security & access management
| Sub-processor |
Service |
Location |
Transfer safeguard |
| Cloudflare |
Edge security, WAF, DDoS protection |
US |
SCCs |
| Darktrace |
Threat detection |
UK |
N/A |
| Tenable |
Vulnerability management |
US |
SCCs |
| JumpCloud |
Identity, access, device management |
US |
SCCs |
| Teleport |
Privileged access management |
US (self-hosted) |
Internal |
| IncidentIO |
On-call and incident management |
UK |
N/A |
| Vanta |
Continuous compliance monitoring |
US |
SCCs |
Engineering & collaboration
| Sub-processor |
Service |
Location |
Transfer safeguard |
| Microsoft (M365) |
Email, documents, collaboration |
EU Data Boundary + US |
EU Data Boundary / SCCs |
| GitHub |
Source code management |
US |
SCCs |
| Atlassian (Jira) |
Issue tracking |
US / EU |
SCCs |
| Slack (Salesforce) |
Internal messaging |
US |
SCCs |
| Notion |
Knowledge base |
US |
SCCs |
| Kaseya / Spanning |
SaaS backup |
US |
SCCs |
| Palantir Technologies Inc. |
Internal data platform (Foundry) |
US |
SCCs / UK IDTA |
| HuggingFace |
Optional model export (fine-tuning) |
US |
SCCs |
Business operations
| Sub-processor |
Service |
Location |
Transfer safeguard |
| Workday, Inc. |
HRIS |
US |
SCCs / UK IDTA |
| Deel |
International contractor management |
US |
SCCs |
| Greenhouse Software, Inc. |
Applicant tracking |
US |
SCCs |
| Zinc |
Background screening |
To confirm |
SCCs |
| NetSuite |
ERP |
US |
SCCs |
| Payhawk |
Expenses & corporate cards |
EU |
N/A (EU) |
| Navan |
Travel management |
US |
SCCs |
| Kyriba |
Treasury management |
To confirm |
SCCs |
| OneStream |
Consolidation accounting |
US |
SCCs |
| Workiva |
Group financial reporting |
US |
SCCs |
| Clearsulting |
Workiva implementation |
US |
SCCs |
| Prevas |
HxGN EAM support |
Sweden |
N/A (EU) |
| DocuSign |
E-signature |
US |
SCCs |
| OneTrust |
Privacy & GRC tooling |
US |
SCCs |
| MetaCompliance / MetaView |
Compliance training |
UK / EU |
N/A / SCCs |
Marketing & customer engagement
| Sub-processor |
Service |
Location |
Transfer safeguard |
| HubSpot, Inc. |
CRM and marketing automation |
US |
SCCs |
| Clay.com |
Prospect enrichment |
US |
SCCs |
| Demand Base |
Intent signals |
US |
SCCs |
| LinkedIn |
Advertising platform |
US / EU (Ireland) |
SCCs |
| Meltwater |
Social listening |
Norway / US |
SCCs |
Contact
Questions about this list or our use of sub-processors? Email privacy@nscale.com.
