Change feed · read Sep 18, 2026
Nebius’ sub-processor list changed.
On Sep 18, 2026 we read Nebius’s sub-processor list, and it no longer matched the dated copy we held. The lines that moved are below, as the page gave them.
lines added
removed
In the new copy, not the old.
Added: Nebius AI Cloud Sub-processors
Added: AI Cloud sub-processors
Added: Token Factory sub-processors
Added: Token Factory Terms
Added: # Nebius AI Cloud Sub-processors
Added: This page identifies the sub-processors engaged by Nebius to process Customer Personal Data on behalf of Customers under the applicable Nebius Data Processing Agreement.
Added: The sub-processors relevant to a particular Customer depend on the Nebius contracting entity, the region selected by the Customer, the Services and features used, and, where applicable, whether the Customer requests support or otherwise elects to share Customer Personal Data with support personnel.
Added: For purposes of this list, a Nebius Group entity is included only where it is engaged by the Nebius contracting entity to process Customer Personal Data on its behalf. The role of the Nebius contracting entity itself as a processor or sub-processor depends on the Customer’s role under the applicable DPA.
Added: Service providers that process personal data for Nebius’ own purposes as a controller, rather than Customer Personal Data on behalf of Customers, are not included in this list.
Added: 1. Cloud infrastructure
Added: The sub-processors listed below provide cloud infrastructure used to process Customer Content in the Customer-selected region. A single Nebius legal entity may support multiple processing regions, and its place of establishment may differ from the location in which Customer Content is processed.
Added: **Sub-processor** | **Entity location** | **Processing activity (country or region)** | **Processing location** | **International transfer mechanism** |
Added: Nebius Inc. Nebius Group | United States | Provision of cloud infrastructure for processing Customer Content in the Customer-selected region | United States | SCC |
Added: Nebius B.V. Nebius Group | Netherlands | Provision of cloud infrastructure for processing Customer Content in the Customer-selected region | France, Iceland, United Kingdom, Finland | EEA - no Chapter V transfer based on the listed processing location |
Added: Nebius Israel Ltd. Nebius Group | Israel | Provision of cloud infrastructure for processing Customer Content in the Customer-selected region | Israel | EU adequacy decision |
Added: 2. Service operations, maintenance and support
Added: The Sub-processors listed below support the development, operation, maintenance, security and technical support of the Services, as applicable. The circumstances in which Customer Personal Data is processed depend on the function performed by each sub-processor and are described in the table below.
Added: **Sub-processor** | **Entity location** | **Processing activity** | **Processing location (country or region)** | **When processing occurs** | **International transfer mechanism** |
Added: Nebius Inc. Nebius Group | United States | Service engineering, operations, maintenance and technical support | Unites States | For operations, where necessary to operate, maintain or troubleshoot the Services; for support, where necessary to respond to a Customer-initiated support request | SCC |
Added: Nebius B.V. Nebius Group | Netherlands | Service engineering, operations, maintenance and technical support | Netherlands | Same | EEA - no Chapter V transfer based on the listed processing location |
Added: Nebius Israel Ltd. Nebius Group | Israel | Service engineering, operations, maintenance and technical support | Israel | Same | EU adequacy decision |
Added: Nebius DC Oy Nebius Group | Finalnd | Service engineering, operations, maintenance and technical support | Finland | Same | EEA - no Chapter V transfer based on the listed processing location |
Added: Nebius UK Ltd. Nebius Group | United Kingdom | Service engineering, operations, maintenance and technical support | United Kingdom | Same | EU adequacy decision |
Added: Nebius CZ s.r.o. Nebius Group | Czech Republic | Service engineering, operations, maintenance and technical support | Czech Republic | Same | EEA - no Chapter V transfer based on the listed processing location |
Added: Nebius GmbH Nebius Group | Germany | Service engineering, operations, maintenance and technical support | Germany | Same | EEA - no Chapter V transfer based on the listed processing location |
Added: Nebius AI Spain S.L.U. Nebius Group | Spain | Service engineering, operations, maintenance and technical support | Spain | Same | EEA - no Chapter V transfer based on the listed processing location |
Added: Nebius France SAS Nebius Group | France | Service engineering, operations, maintenance and technical support | France | Same | EEA - no Chapter V transfer based on the listed processing location |
Added: Tech Hub IL Ltd. Nebius Group | Israel | Service engineering, operations, maintenance and technical support | Israel | Same | EU adequacy decision |
Added: EdTech Plus Tech d.o.o. Beograd Nebius Group | Serbia | Service engineering, operations, maintenance and technical support | Serbia | Same | SCC |
Added: Microsoft Corporation (Sentinel) | United States | Customer communications; Security Information and Event Management | EU | When relevant security logs or telemetry are ingested and processed for security monitoring and incident response | SCC |
Added: Functional Software, Inc. (Sentry) | United States | Application Performance; Monitoring & Error / Bug Tracking | US | When relevant application telemetry, error events or diagnostic data are sent to Sentry | SCC |
Added: Hubspot, Inc. | United States | Delivery of customer communications, such as in-product messages and emails | EU, US | When Customer Personal Data is entered into or otherwise processed through HubSpot in connection with customer communications or relationship management activities | SCC |
Added: Atlassian Pty Ltd. (Jira) | Australia | Customer support and ticket handling | EU, US with respect to Atlassian Rovo inference services | When a Customer submits a support request or Customer Personal Data is included in a support ticket | SCC |
Added: Slack Technologies, LLC | United States | Customer communications; Customer support | EU | When Slack is used for communications with a Customer and Customer Personal Data is shared or otherwise processed in connection with that interaction | SCC |
Added: - *Added*:
Added: Nebius AI Spain S.L.U. internal sub-processor.
Added: - Nebius France SAS internal sub-processor.
Added: - *Updated*: Grouped the types of sub-processors.
Added: Publication date: September 15, 2026
Added: *Previous version of the document: [https://docs.nebius.com/legal/archive/sub-processors-20260311](/legal/archive/sub-processors-20260311)*
Added: Token Factory sub-processors
In the old copy, not the new.
Removed: Terms for specific applications
Removed: Terms for Professional Services
Removed: **INTERNAL** Sub-processors (Legal Entities of Nebius Group)
Removed: **Name of Sub-processor** | **Services Performed** | **Sub-processor Location** |
Removed: Nebius DC Oy | Cloud infrastructure | Finland |
Removed: Nebius Inc. | Cloud infrastructure. *At the Customer’s discretion.* Service Maintenance Support (for customers of Nebius B.V. or Nebius Israel Ltd.) | United States |
Removed: Nebius B.V. | Cloud infrastructure Service Maintenance Support (for customers of Nebius Inc.) | Netherlands |
Removed: Nebius Israel Ltd. | Cloud infrastructure. Service Maintenance Support (for customers of Nebius Inc. and Nebius B.V.) | Israel |
Removed: Nebius UK Ltd. | Service Maintenance Support | United Kingdom |
Removed: **EXTERNAL** Sub-processors
Removed: **Name of Sub-processor** | **Purpose of Processing** | **Entity Location** | **Hosting location** | **Sub-Processor Privacy Documentation*** |
Removed: Stripe Payments Europe, Ltd. | Payment processing | Ireland | United States | [Privacy Policy](https://stripe.com/en-nl/privacy) [List of Sub-Processors](https://stripe.com/nl/legal/preview/service-providers) |
Removed: Hubspot, Inc. | Customer Relations Management Delivery of customer communications, such as in-product messages and emails | United States | European Union | [Privacy Policy](https://legal.hubspot.com/privacy-policy) [List of Sub-Processors](https://legal.hubspot.com/sub-processors-page) |
Removed: Atlassian Pty Ltd. (Jira, Confluence) | Customer support and ticket handling | Australia | European Union | [Privacy Policy](https://www.atlassian.com/legal/privacy-policy) [List of Sub-Processors](https://www.atlassian.com/legal/sub-processors) |
Removed: Slack Technologies, LLC | Customer communications Customer support | United States | European Union | [Privacy Policy](https://slack.com/intl/en-gb/trust/privacy/privacy-policy) [List of Sub-Processors](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/misc/salesforce-infrastructure-and-subprocessors.pdf) |
Removed: Factiva Limited (Dow Jones) | Managed compliance screening service | United Kingdom | United States | [Privacy Policy](https://www.dowjones.com/privacy-notice/) |
Removed: Oracle Corporation (Netsuite) | Billing and Accounting | United States | United States | [Privacy Policy](https://www.oracle.com/legal/privacy/privacy-policy/) |
Removed: Microsoft Corporation (Microsoft 365, Sentinel) | Customer communications Security Information and Event Management | United States | European Union | [Privacy Policy](https://www.microsoft.com/en-gb/privacy/privacystatement) [List of Sub-Processors](https://servicetrust.microsoft.com/DocumentPage/8d295fc2-f7d9-4662-8301-99b077fc6b79) |
Removed: Functional Software, Inc. (Sentry) | Application Performance Monitoring & Error / Bug Tracking | United States | United States | [Privacy Policy](https://sentry.io/privacy/) [List of Sub-Processors](https://sentry.io/legal/subprocessors/) |
Removed: Publication date: March 11, 2026
Removed: Acceptable Use Policy
Check it yourself.
The page we read, when we read it, and a fingerprint (SHA-256 hash) of each dated copy we compared.
- Vendor
- Nebius
- Page
- sub-processor list
- Read on
- Public since
- Copy before
- fingerprint c51a8c5d7b701d28b7ed7e39d838b193228cc51a7ef808edd0f23c00a5f260a8
- Copy after
- fingerprint fef49d9b5a72d99a4efb1da8e0de5c0b4144b40babad085f8417040f42a5079a
32 other changed lines held only dates, navigation, pagination, layout, or text that moved without changing. They are not quoted above and are in the list below with the rest.
Every changed line, as recorded (94)
− List of processors/subprocessors − List of processors/sub-processors − - − Terms for specific applications − Terms for Professional Services − ](/legal/specific-terms/professional-services) − - [ − - [Subscribe to sub-processor updates](#subscribe-to-sub-processor-updates) − # List of processors/subprocessors − **INTERNAL** Sub-processors (Legal Entities of Nebius Group) − **Name of Sub-processor** | **Services Performed** | **Sub-processor Location** | − Nebius DC Oy | Cloud infrastructure | Finland | − Nebius Inc. | Cloud infrastructure. *At the Customer’s discretion.* Service Maintenance Support (for customers of Nebius B.V. or Nebius Israel Ltd.) | United States | − Nebius B.V. | Cloud infrastructure Service Maintenance Support (for customers of Nebius Inc.) | Netherlands | − Nebius CZ s.r.o. | Service Maintenance Support | Czech Republic | − Nebius GmbH | Service Maintenance Support | Germany | − Nebius Israel Ltd. | Cloud infrastructure. Service Maintenance Support (for customers of Nebius Inc. and Nebius B.V.) | Israel | − Nebius UK Ltd. | Service Maintenance Support | United Kingdom | − Tech Hub IL Ltd. | Service Maintenance Support | Israel | − EdTech Plus Tech d.o.o. Beograd | Service Maintenance Support | Serbia | − **EXTERNAL** Sub-processors − **Name of Sub-processor** | **Purpose of Processing** | **Entity Location** | **Hosting location** | **Sub-Processor Privacy Documentation*** | − Stripe Payments Europe, Ltd. | Payment processing | Ireland | United States | [Privacy Policy](https://stripe.com/en-nl/privacy) [List of Sub-Processors](https://stripe.com/nl/legal/preview/service-providers) | − Hubspot, Inc. | Customer Relations Management Delivery of customer communications, such as in-product messages and emails | United States | European Union | [Privacy Policy](https://legal.hubspot.com/privacy-policy) [List of Sub-Processors](https://legal.hubspot.com/sub-processors-page) | − Atlassian Pty Ltd. (Jira, Confluence) | Customer support and ticket handling | Australia | European Union | [Privacy Policy](https://www.atlassian.com/legal/privacy-policy) [List of Sub-Processors](https://www.atlassian.com/legal/sub-processors) | − Slack Technologies, LLC | Customer communications Customer support | United States | European Union | [Privacy Policy](https://slack.com/intl/en-gb/trust/privacy/privacy-policy) [List of Sub-Processors](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/misc/salesforce-infrastructure-and-subprocessors.pdf) | − Factiva Limited (Dow Jones) | Managed compliance screening service | United Kingdom | United States | [Privacy Policy](https://www.dowjones.com/privacy-notice/) | − Oracle Corporation (Netsuite) | Billing and Accounting | United States | United States | [Privacy Policy](https://www.oracle.com/legal/privacy/privacy-policy/) | − Microsoft Corporation (Microsoft 365, Sentinel) | Customer communications Security Information and Event Management | United States | European Union | [Privacy Policy](https://www.microsoft.com/en-gb/privacy/privacystatement) [List of Sub-Processors](https://servicetrust.microsoft.com/DocumentPage/8d295fc2-f7d9-4662-8301-99b077fc6b79) | − Functional Software, Inc. (Sentry) | Application Performance Monitoring & Error / Bug Tracking | United States | United States | [Privacy Policy](https://sentry.io/privacy/) [List of Sub-Processors](https://sentry.io/legal/subprocessors/) | − Publication date: March 11, 2026 − Effective date: March 11, 2026 − Acceptable Use Policy − ](/legal/aup) + Nebius AI Cloud Sub-processors + AI Cloud sub-processors + - [ + Token Factory sub-processors + ](/legal/sub-processors_tofa) + - [ + Token Factory Terms + ](/legal/token-factory) + - [1. Cloud infrastructure](#1-cloud-infrastructure) + - [2. Service operations, maintenance and support](#2-service-operations-maintenance-and-support) + [Subscribe to sub-processor updates](#subscribe-to-sub-processor-updates) + - [September 15, 2026](#september-15-2026) + # Nebius AI Cloud Sub-processors + This page identifies the sub-processors engaged by Nebius to process Customer Personal Data on behalf of Customers under the applicable Nebius Data Processing Agreement. + The sub-processors relevant to a particular Customer depend on the Nebius contracting entity, the region selected by the Customer, the Services and features used, and, where applicable, whether the Customer requests support or otherwise elects to share Customer Personal Data with support personnel. + For purposes of this list, a Nebius Group entity is included only where it is engaged by the Nebius contracting entity to process Customer Personal Data on its behalf. The role of the Nebius contracting entity itself as a processor or sub-processor depends on the Customer’s role under the applicable DPA. + Service providers that process personal data for Nebius’ own purposes as a controller, rather than Customer Personal Data on behalf of Customers, are not included in this list. + ## + [ + ](#1-cloud-infrastructure) + 1. Cloud infrastructure + The sub-processors listed below provide cloud infrastructure used to process Customer Content in the Customer-selected region. A single Nebius legal entity may support multiple processing regions, and its place of establishment may differ from the location in which Customer Content is processed. + **Sub-processor** | **Entity location** | **Processing activity (country or region)** | **Processing location** | **International transfer mechanism** | + Nebius Inc. Nebius Group | United States | Provision of cloud infrastructure for processing Customer Content in the Customer-selected region | United States | SCC | + Nebius B.V. Nebius Group | Netherlands | Provision of cloud infrastructure for processing Customer Content in the Customer-selected region | France, Iceland, United Kingdom, Finland | EEA - no Chapter V transfer based on the listed processing location | + Nebius Israel Ltd. Nebius Group | Israel | Provision of cloud infrastructure for processing Customer Content in the Customer-selected region | Israel | EU adequacy decision | + ## + [ + ](#2-service-operations-maintenance-and-support) + 2. Service operations, maintenance and support + The Sub-processors listed below support the development, operation, maintenance, security and technical support of the Services, as applicable. The circumstances in which Customer Personal Data is processed depend on the function performed by each sub-processor and are described in the table below. + **Sub-processor** | **Entity location** | **Processing activity** | **Processing location (country or region)** | **When processing occurs** | **International transfer mechanism** | + Nebius Inc. Nebius Group | United States | Service engineering, operations, maintenance and technical support | Unites States | For operations, where necessary to operate, maintain or troubleshoot the Services; for support, where necessary to respond to a Customer-initiated support request | SCC | + Nebius B.V. Nebius Group | Netherlands | Service engineering, operations, maintenance and technical support | Netherlands | Same | EEA - no Chapter V transfer based on the listed processing location | + Nebius Israel Ltd. Nebius Group | Israel | Service engineering, operations, maintenance and technical support | Israel | Same | EU adequacy decision | + Nebius DC Oy Nebius Group | Finalnd | Service engineering, operations, maintenance and technical support | Finland | Same | EEA - no Chapter V transfer based on the listed processing location | + Nebius UK Ltd. Nebius Group | United Kingdom | Service engineering, operations, maintenance and technical support | United Kingdom | Same | EU adequacy decision | + Nebius CZ s.r.o. Nebius Group | Czech Republic | Service engineering, operations, maintenance and technical support | Czech Republic | Same | EEA - no Chapter V transfer based on the listed processing location | + Nebius GmbH Nebius Group | Germany | Service engineering, operations, maintenance and technical support | Germany | Same | EEA - no Chapter V transfer based on the listed processing location | + Nebius AI Spain S.L.U. Nebius Group | Spain | Service engineering, operations, maintenance and technical support | Spain | Same | EEA - no Chapter V transfer based on the listed processing location | + Nebius France SAS Nebius Group | France | Service engineering, operations, maintenance and technical support | France | Same | EEA - no Chapter V transfer based on the listed processing location | + Tech Hub IL Ltd. Nebius Group | Israel | Service engineering, operations, maintenance and technical support | Israel | Same | EU adequacy decision | + EdTech Plus Tech d.o.o. Beograd Nebius Group | Serbia | Service engineering, operations, maintenance and technical support | Serbia | Same | SCC | + Microsoft Corporation (Sentinel) | United States | Customer communications; Security Information and Event Management | EU | When relevant security logs or telemetry are ingested and processed for security monitoring and incident response | SCC | + Functional Software, Inc. (Sentry) | United States | Application Performance; Monitoring & Error / Bug Tracking | US | When relevant application telemetry, error events or diagnostic data are sent to Sentry | SCC | + Hubspot, Inc. | United States | Delivery of customer communications, such as in-product messages and emails | EU, US | When Customer Personal Data is entered into or otherwise processed through HubSpot in connection with customer communications or relationship management activities | SCC | + Atlassian Pty Ltd. (Jira) | Australia | Customer support and ticket handling | EU, US with respect to Atlassian Rovo inference services | When a Customer submits a support request or Customer Personal Data is included in a support ticket | SCC | + Slack Technologies, LLC | United States | Customer communications; Customer support | EU | When Slack is used for communications with a Customer and Customer Personal Data is shared or otherwise processed in connection with that interaction | SCC | + ](#september-15-2026) + September 15, 2026 + - *Added*: + Nebius AI Spain S.L.U. internal sub-processor. + - Nebius France SAS internal sub-processor. + - *Updated*: Grouped the types of sub-processors. + [ + Publication date: September 15, 2026 + Effective date: September 15, 2026 + *Previous version of the document: [https://docs.nebius.com/legal/archive/sub-processors-20260311](/legal/archive/sub-processors-20260311)* + Token Factory sub-processors + ](/legal/sub-processors_tofa)
How to read a date here.
The date is when we read the page.
Not when the vendor edited it. We can't see an edit history. We can say the page held one text before this reading and another on it.
Only changes that matter are listed.
A change is left out when only dates, navigation, pagination or layout moved, or when the difference came from how our reader converted the page, not the page itself.
It is not a finding against the vendor.
A change here records that Nebius's page text differed, and nothing more.
days late
Everything here went public 30 days after we read it.
Subscribers get an email the morning we read a change that matters on one of their vendors’ pages, with the lines that moved.
No card. Nothing to cancel.