Legal
Sub-processors
Effective April 1, 2026 · Last updated September 2026
To deliver our website and products we rely on a small set of vetted third-party service providers (“sub-processors”) that process personal information on our behalf, under contract and only as needed.
Current sub-processors
| Provider | Purpose | Data location | Scope |
|---|---|---|---|
| Vercel | Product application hosting & content delivery | United States / global edge | Products |
| Cloudflare | Website hosting, content delivery, scheduled-email queue & social media storage | United States / global edge | Website |
| Amazon Web Services (Amazon SES) | Transactional & inquiry email delivery | Canada (Montréal region) | Both |
| Resend | Backup transactional & inquiry email delivery | United States / EU | Both |
| Plausible Analytics | Privacy-first, cookieless website analytics (consent-gated) | European Union | Website |
| Google Analytics | Website usage analytics (cookie-based, consent-gated) | United States / global | Website |
| Google Ads | Advertising conversion measurement & remarketing tag (consent-gated) | United States / global | Website |
| Meta Platforms (Facebook Pixel) | Advertising conversion measurement & remarketing pixel (consent-gated) | United States / global | Website |
| Google Cloud (Vertex AI — Gemini) | AI assistant (“Sage”) & adaptive learning responses | United States / Canada region | Both |
| Google Speech / Microsoft Edge TTS | Speech transcription & synthesis for voice drills (transient audio; see Privacy Policy §14) | United States | Products |
| Railway | Application hosting & PostgreSQL database | United States | Products |
| Stripe (Stripe Payments Canada Ltd.) | Payment processing for paid plans (no full card data stored by us) | United States / Canada | Products |
Processing outside Canada
Some providers above store or process personal information outside Canada, including in the United States and the European Union, where it is subject to local laws. This list is provided as the notice contemplated by Alberta's PIPA regarding service providers outside Canada. See our Privacy Policy for how we protect information transferred internationally.
Changes to this list
We review sub-processors for their security and privacy posture before use and update this list when providers change. Institutional customers under a Data Processing Addendum receive advance notice of new sub-processors as set out in that agreement. Questions: privacy@ngnsimulation.com.