Transparency
Sub-processors
To deliver Noxlyt's release-validation service we rely on a small set of sub-processors. Each operates under a data-processing agreement (DPF-certified where applicable). The table below lists every sub-processor, what it does, where it stores data, and the safeguards in place.
| Sub-processor | Purpose | Data location | Safeguards |
|---|---|---|---|
| Google CloudGoogle Ireland / Google LLC | Hosting, database, storage, message queue, test execution (Compute Engine Spot VMs) | EU europe-west1 (Belgium) | DPA/SCCs; DPF-certified |
| GitHubGitHub Inc. / Microsoft | Version control of test-project source code | US (github.com default) | DPA/SCCs; DPF (Microsoft) |
| Cloudflare | DNS, CDN, edge (TLS termination global; DLS not enabled) + anti-bot (Turnstile) & contact-form processing | Global edge | DPA/SCCs; DPF |
| Cloudflare Web Analytics | Aggregate, anonymised, cookieless website traffic metrics (no client-side state; no per-user tracking) | Global edge | DPA/SCCs; DPF |
| ResendPlus Five Five, Inc. | Transactional email delivery | Email delivery via Ireland (eu-west-1) send region; account data & metadata stored in the US | DPA/SCCs; DPF-certified (EU-U.S. DPF) |
A full Data-Processing Agreement is available on request.