Legal

Current sub-processors

The services listed here may process personal or organisational data on behalf of Nordbrief when the related feature is enabled. The list is intentionally short and should stay legible to the organisations using the product.

Last reviewed · April 18, 2026
Sub-processors

AWS

Primary hosting and encrypted storage

eu-central-1 (Frankfurt) with encrypted backup replication to eu-north-1 (Stockholm)
Data handled

Application data, document drafts, logs, file storage, backups

Used for core infrastructure. No production personal data is intentionally routed outside the EU.

Stripe

Billing, subscription management, and invoicing

EU operations via Stripe Ireland
Data handled

Customer billing details, invoice metadata, plan and seat state

Only active when paid plans are enabled for the workspace. Card details are handled by Stripe-hosted flows rather than stored by Nordbrief.

Resend

Transactional email delivery

Service-layer processing for product email delivery
Data handled

Recipient address, subject lines, delivery metadata, message body where needed

Used for product email such as contact intake, sign-in links, and operational notices when email delivery is configured.