Nimbli Sub-processors

• What it does for Nimbli: hosts the Nimbli application and its database.
• Data it handles: all account, team, link and click-count data.
• Location: United States (US East).

• What it does for Nimbli: DNS, network protection and caching in front of Nimbli; Turnstile bot check on forms for people who aren't signed in; R2 storage for encrypted backups.
• Data it handles: requests to Nimbli, including visitor IP addresses in transit; network-error reports sent by a visitor's browser when a connection to Nimbli fails; encrypted backups.
• Location: United States and Cloudflare's global network.

• What it does for Nimbli: Sign in with Google, for people who choose it; Web Risk checks of link destinations; Google Workspace mailboxes for support and abuse.
• Data it handles: sign-in details (account ID, email, name); destination addresses of links; what people write to support@ and abuse@.
• Location: United States.

• What it does for Nimbli: sends Nimbli's emails: team invitations, flagged or disabled link notices, review answers, confirming addresses, password resets.
• Data it handles: recipient email addresses and email content, including one-time links.
• Location: United States.

• What it does for Nimbli: AI model that helps review abuse reports and review requests, and writes a short daily note for the admin from totals.
• Data it handles: the reported link and destination, why it was flagged, the report text, a summary of the team's history; daily totals and averages with no names, addresses or destinations. No data about people who click links.
• Location: United States.

For a later version:

• Stripe, Inc.: payments for paid plans. Data: billing details of paying customers.