Sub-processor List

Version: 1.0 Last updated: March 2026

Nordlabs AS uses the following third-party sub-processors in the delivery of the Claros platform. This list is maintained in accordance with our Data Processing Agreement and GDPR obligations.

Customers will be notified of material changes to this list with at least 14 days' notice, providing time to object before changes take effect.

Current sub-processors

Hetzner Cloud

Germany / Finland

Infrastructure hosting — servers, storage, networking for all Claros SaaS applications

Cloudflare

EU (data processed in EU where possible)

DNS, DDoS protection, CDN, and tunnel access

Anthropic

USA

AI inference — when AI features are enabled and Anthropic is the configured provider. Customer data is used for inference only, not model training.

OpenAI

USA

AI inference — when OpenAI is configured as the AI provider. Customer data is used for inference only, not model training.

AI providers — important note

AI processing is opt-in. Anthropic and OpenAI are only engaged as sub-processors when AI features are enabled in your Claros organisation settings. If AI is disabled, no data is sent to these providers.

Organisations can also configure a self-hosted AI provider (e.g. Ollama) through Nexus, in which case no third-party AI sub-processor is involved.

Cortex (desktop application)

Cortex is a local-first application. Nordlabs AS is not a sub-processor for Cortex data — all data resides on the user's machine. The user's configured AI provider processes data directly from the user's device.

Questions

For questions about this list or to object to a sub-processor change, contact security@nordlabs.ai.