Subprocessors
Version 1 · effective 2026-07-30
The third-party providers Nightingale uses to deliver its services.
Nightingale uses a small number of third-party providers to deliver its services. Each is engaged under a written agreement containing data protection obligations no less protective than those in our Data Processing Agreement.
The current list is maintained below and is kept up to date as providers change. We give customers notice before adding or replacing a provider that processes personal data.
Questions about this list: privacy@nightingalesoftware.co.uk
Subprocessors
The third parties we use to deliver the Services, and what each one processes.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Supabase | Managed PostgreSQL database, authentication and file storage for the platform | Account data, authentication data, application records, audit logs | European Union |
| Cloudflare | Application hosting, content delivery, DNS and network security | IP addresses, request metadata, data in transit | Global edge network |
| Stripe | Subscription billing, payment processing and invoicing | Billing contact details, subscription and payment records. Card details are held by Stripe and never by Nightingale. | United States and European Union |
| Mailgun | Delivery of transactional and account email | Recipient email address, message content, delivery status | European Union |
| Google Cloud (Gemini) | AI features such as summarisation and insight generation | Only the content submitted to an AI feature at the time of the request. Not used to train models. | European Union and United States |