Subprocessors
Third-party services that process data on behalf of Nubiq AI to deliver the platform.
Last updated: March 2026
About This List
In accordance with our Data Processing Agreement (/dpa) and GDPR Article 28, we maintain this list of subprocessors that may process personal data on behalf of our customers. Each subprocessor is bound by contractual obligations that provide a level of data protection consistent with our DPA.
We will notify customers at least 30 days before adding a new subprocessor or making material changes to an existing one. If you have subscribed to subprocessor change notifications, you will receive an email alert. To subscribe, contact dpo@nubiq.ai.
| Subprocessor | Service | Purpose | Location | DPA |
|---|---|---|---|---|
| Google LLC | Gemini API | AI embeddings, text generation, document indexing | USA | View DPA |
| Cloudflare Inc | R2 Storage | Document storage, CDN | Global | View DPA |
| Stripe Inc | Payments | Subscription billing, invoicing | USA / Global | View DPA |
| ClamAV (Cisco) | Malware scanning | Document security scanning | Self-hosted | N/A (self-hosted) |
How Data Flows Through Subprocessors
Google Gemini API: When a user sends a message to your chatbot, the conversation context and relevant document excerpts are sent to the Gemini API to generate a response. When you upload documents, their text content is sent to Gemini to compute vector embeddings for semantic search. Google processes this data under their Cloud Data Processing Addendum and does not use it to train their models.
Cloudflare R2: Uploaded documents are stored in Cloudflare R2 with encryption at rest (AES-256). Documents are accessed only when needed for indexing or retrieval. R2 provides global edge caching for fast access.
Stripe: When you subscribe to a paid plan, your billing information (name, email, payment method) is processed by Stripe. Nubiq does not store full credit card numbers — this is handled entirely by Stripe in their PCI-DSS compliant environment.
ClamAV: All uploaded documents are scanned for malware using ClamAV, which runs entirely within our own infrastructure. No document data leaves our servers for this purpose.
Change Log
Related documents: Terms of Service · Privacy Policy · Data Processing Agreement