Counsel-reviewable engineering draft

Nook Subprocessor List Draft

Current engineering inventory of external processing candidates and disabled integrations.

Document code
subprocessor_list
Version
2026-08-02-draft.1
Locale
en-US
Status
engineering_draft_counsel_review_required
Product scope
Nook Cloud, Customer Portal, Marketing website
Canonical SHA-256
c32b674215510768bdb4bda8f2f463e72a8e80828fba88e9293c34f213194966

Configured candidate

Resend is the implemented optional provider for Portal transactional email. When disabled, registration delivery fails globally rather than silently selecting another provider. Production use, region, legal entity, transfer basis, and contract are not approved in this draft.

Not yet selected or not a Portal subprocessor

  • A production website, Nook Cloud, Portal, database, object-storage, observability, and support hosting provider has not been recorded as approved here.
  • The payment provider seam is disabled; no payment subprocessor is active.
  • Self-hosted infrastructure chosen and operated by the customer is not represented as a Nook subprocessor by this page.
  • Customer-configured integrations need separate role analysis and disclosure before production use.

Change process

The final list must name the legal entity, service, purpose, data categories, processing locations, transfer mechanism, effective date, and objection/change-notice process. A new version and material-change review are required before adding a production processor.