Sub-processors
Every third party that can touch data we hold for you, what they do, where they are, and what protects the transfer.
We keep this list short on purpose. Each entry is a company that could, in the course of doing its job for us, process personal data belonging to you or your organisation. Everything else about Netscope runs on our own infrastructure.
Under clause 4 of the Data Processing Agreement, we give 30 days' notice before adding or replacing any of them, and you may object on reasonable data protection grounds at privacy@netscope.fr.
Sub-processors
| Provider | Purpose | Data | Location | Safeguard |
|---|---|---|---|---|
| OVHcloud SAS | Infrastructure hosting: application servers, databases, backups | All service data | France (EU) | No transfer outside the EEA |
| Resend, Inc. | Transactional and service email delivery | Email address, name, message content | United States | Standard Contractual Clauses |
| Cloudflare, Inc. | Turnstile anti-abuse verification on public forms | IP address, browser signals | United States / global network | Standard Contractual Clauses; EU–US Data Privacy Framework |
Not sub-processors
These parties can receive personal data, but they decide their own purposes and are independent controllers rather than our sub-processors. We list them anyway, because a data flow you cannot see is one you cannot assess.
| Provider | When | Data | Location |
|---|---|---|---|
| Google, GitHub (Microsoft), Microsoft | Optional single sign-on, only if you choose that sign-in method | Your provider profile: email address, name, provider account ID | United States |
Signing in with a provider is optional. Choose email and password, and no data reaches any of them.
What is not on this list
Our analytics are not on this list because they are not a third party: we run Plausible on our own servers in France. No data about your visit leaves our infrastructure. See the Cookie Policy.
We use no advertising networks, no customer data platforms, no session recording, no third-party chat widgets and no marketing automation. If that changes, this page changes 30 days first.
Where your data actually lives
Your account, your projects, your topology and your scan results are stored on OVH SAS infrastructure in France, along with their backups. They are not replicated outside the European Economic Area.