Legal
Sub-processors
Effective [EFFECTIVE DATE] · Last updated June 2026
Draft for review — not legal advice. This document is a working draft prepared from regulatory and industry guidance. It must be reviewed by qualified legal counsel before it is published or relied upon.
To deliver our website and products we rely on a small set of vetted third-party service providers (“sub-processors”) that process personal information on our behalf, under contract and only as needed.
Current sub-processors
| Provider | Purpose | Data location | Scope |
|---|---|---|---|
| Vercel | Website hosting & content delivery (CDN) | United States / global edge | Both |
| Resend | Transactional & inquiry email delivery | United States / EU | Both |
| Plausible Analytics | Privacy-first, cookieless website analytics (consent-gated) | European Union | Website |
| Google Cloud (Vertex AI — Gemini) | AI assistant (“Sage”) & adaptive learning responses | United States / Canada region | Both |
| [PAYMENT PROCESSOR] | Payment processing for paid plans (no full card data stored by us) | [PROCESSOR REGION] | Products |
| [ERROR-MONITORING PROVIDER] | Application error & performance monitoring | [REGION] | Products |
| [SUPPORT TOOL] | Customer support ticketing & communications | [REGION] | Products |
Processing outside Canada
Some providers above store or process personal information outside Canada, including in the United States and the European Union, where it is subject to local laws. This list is provided as the notice contemplated by Alberta's PIPA regarding service providers outside Canada. See our Privacy Policy for how we protect information transferred internationally.
Changes to this list
We review sub-processors for their security and privacy posture before use and update this list when providers change. Institutional customers under a Data Processing Addendum receive advance notice of new sub-processors as set out in that agreement. Questions: privacy@ngnsimulation.com.