Sub-processors
Last updated: 22 September 2026
These companies help NOZAIA run the platform and may process the data of salons and their clients. Each is bound by a contract that protects the data at least as well as our Data Processing Agreement. We announce a new sub-processor at least 30 days in advance, here and by email to salon owners.
Supabase
- Company: Supabase, Inc. (United States)
- What for: Database, file storage and sign-in: all salon and client data is stored here.
- Where the data is: European Union (Frankfurt, Germany)
- Safeguard: Data stored in the EU. Support access from the US under the EU Standard Contractual Clauses.
Vercel
- Company: Vercel Inc. (United States)
- What for: Hosting of the website, the dashboard and the server functions.
- Where the data is: European Union (Frankfurt, Germany); static pages via a worldwide network
- Safeguard: EU-US Data Privacy Framework and the EU Standard Contractual Clauses.
Resend
- Company: Resend, Inc. (United States)
- What for: Sending emails: booking confirmations, reminders and the salon's own campaigns.
- Where the data is: European Union (Ireland)
- Safeguard: Emails are sent from the EU region. EU Standard Contractual Clauses for support access.
Anthropic
- Company: Anthropic, PBC (United States)
- What for: The AI features (NOZAIA AI in the dashboard, ZIA on the salon page, the switch-over scan). Only the data needed for one answer is sent, only when someone uses the feature.
- Where the data is: United States
- Safeguard: EU Standard Contractual Clauses. Not used to train models under Anthropic's commercial terms.
- When: Only when the salon or its clients use an AI feature.
Stripe
- Company: Stripe Payments Europe, Ltd. (Ireland)
- What for: The salon's NOZAIA subscription. For payments by clients, the salon has its own contract with Stripe (Stripe Connect); Stripe is then not a sub-processor of NOZAIA but a party the salon chose.
- Where the data is: European Union (Ireland), with transfers to Stripe, Inc. (United States)
- Safeguard: EU-US Data Privacy Framework and the EU Standard Contractual Clauses.
Payment services the salon chooses itself
For payments by clients, a salon links its own account with a payment service. The salon has its own contract with that service, so these are not sub-processors of NOZAIA. NOZAIA only sends what is needed to start a payment.
- Stripe (Connect and Terminal): Most countries
- Sentoo: Aruba, Curaçao, Bonaire, Sint Maarten
- PayTabs: Bahrain, Egypt, Kuwait, Morocco, Oman, Qatar, Saudi Arabia
- Paystack: Ghana, Kenya, Nigeria, South Africa
- Mopé: Suriname
- Payment terminals: Adyen, Clover, Mercado Pago, Mollie, Square, SumUp, Viva: Where the salon links its own terminal
Questions or objections: info@nozaia.nl
