Sub-processors
Nexune Migrate runs almost entirely inside Microsoft Azure. This is the full list of third parties that process data on our behalf — grounded in what the product actually runs, not a template. We post material changes here and notify customers with an active agreement before a new sub-processor goes live.
| Sub-processor | Purpose | Data categories | Location |
|---|---|---|---|
| Microsoft Azure | Core infrastructure: compute (App Service), SQL Database, Key Vault (HSM signing keys + per-tenant tokens), Blob storage (WORM audit receipts), Service Bus, Communication Services (transactional email), Application Insights telemetry. | All customer and operational data, audit log, per-tenant delegated tokens (Key Vault), device migration records. | Azure UK South (primary hosted region). Enterprise customers may elect a dedicated region. |
| Microsoft Entra ID + Microsoft Graph | Operator authentication (multi-tenant AAD) and the tenant device/identity APIs the migration reads and writes on your behalf. Delegated per-user tokens only — Nexune never holds a long-lived tenant client secret. | Operator identity (oid/tid), and the source/destination tenant device + user metadata acted on during a migration. | Microsoft global identity platform. |
| Stripe | Subscription billing and payment processing (checkout, invoices, webhooks). Card data is collected and held by Stripe; it never reaches Nexune servers. | Billing contact, subscription and invoice records, payment method (Stripe-held). | United States / Stripe global infrastructure. |
| Netlify | Static hosting and CDN for this public marketing site and the documentation site only. It serves no application, and no customer, operator, or device data passes through it. | Standard web-request logs for the public site (e.g. IP, user agent). No product data. | Global CDN (US-headquartered). |
The Data Processing Addendum (GDPR Article 28 + India DPDP) enumerates these sub-processors and appends Standard Contractual Clauses. Request it, or ask a question about any entry here, at security@nexune.in.
Related: Security & compliance · Data Processing Addendum · Privacy