Legal
Sub-processors
Material sub-processors used by NovaMX when processing personal data for customers, listed by role and jurisdiction.
Purpose
This page lists material sub-processor categories NovaMX may engage when acting as processor under the Data processing agreement. NovaMX remains responsible to the customer for delegated processing. Supplier brand names are not published on the marketing site; a named list is available in the signed DPA pack or on request for enterprise due diligence.
Material sub-processors
| Role | Region / jurisdiction | What is processed |
|---|---|---|
| Hosting, compute, storage and network | EU / EEA | Service data, configuration and operational logs needed to run NovaMX services |
| Domain registry and wholesale registrar | EU / EEA, plus the TLD registry for each domain | Domain holder and registration contact data for registration, transfer and registry operations |
| Mail filtering and anti-abuse | EU / EEA | Mail metadata and filtering signals where mail-security or related email services apply |
| CDN and edge delivery | EU-first edge locations | Static content delivery and related edge logs where CDN is used |
| Payment and accounting | EU / EEA | Billing and invoice data (NovaMX mainly as controller; limited customer contact details may be processed) |
For a named sub-processor list, use the enterprise DPA pack after acceptance, or contact NovaMX for due diligence under confidentiality.
Material changes will be published on this page. Where practicable, NovaMX gives reasonable prior notice for DPA-covered processing changes.
List version 2026-09-16.1.