Search
This page provides information about the third-party service providers, subprocessors, and infrastructure providers that People Future S.L., operating under the commercial name Nairo (“Nairo”, “we”, “us”, or “our”), may use in connection with the operation, delivery, security, support, and improvement of the Nairo website, private MVP, platform access, and related services.
Not every provider listed on this page is used for every customer, workspace, deployment, feature, or workflow. The providers used may depend on the relevant customer configuration, deployment region, product functionality, infrastructure environment, and services enabled.
Nairo seeks to evaluate subprocessors and infrastructure providers based on factors such as:
Customers may contact privacy@nairobilabs.com with questions regarding subprocessors, infrastructure providers, or customer data handling practices.
| Provider | Purpose | Data processed | Region | Notes |
|---|---|---|---|---|
| Anthropic | AI models, reasoning capabilities, analysis, and selected AI workflows | Prompts, AI interactions, outputs, customer-provided content where used | USA / EEA, depending on configuration | Used for selected AI workflows and reasoning tasks |
| OpenAI | AI models, content generation, assistants, analysis, and selected AI-powered workflows | Prompts, AI interactions, outputs, customer-provided content where used | USA / EEA, depending on configuration | Used for selected AI-powered workflows and assistants |
| Google Vertex AI | AI models, inference, embeddings, agent-related workflows, and AI infrastructure | Prompts, AI interactions, embeddings, outputs, metadata, customer-provided content where used | EEA / USA, depending on configuration | Used for AI-powered platform functionality where enabled |
| Google Document AI | Document processing, extraction, OCR, document understanding, and RAG-related workflows | Uploaded documents, extracted text, document metadata, customer-provided content where used | EEA / USA, depending on configuration | Used for document understanding and processing where enabled |
| Amazon Bedrock | AI model access, model inference, and AI infrastructure through AWS | Prompts, AI interactions, outputs, customer-provided content where used | EEA / USA, depending on selected AWS region and model provider | May be used as part of AWS-based AI infrastructure or selected deployments |
| Amazon Textract | OCR, document extraction, and document analysis through AWS | Uploaded documents, extracted text, document metadata, customer-provided content where used | EEA / USA, depending on selected AWS region | May be used for document processing and extraction workflows |
| Provider | Purpose | Data processed | Region | Notes |
|---|---|---|---|---|
| Google Cloud Platform (GCP) | Cloud infrastructure, compute, storage, networking, security, and related platform services | Customer content, uploaded files, workspace data, metadata, logs, infrastructure data | EEA / USA, depending on configuration | Current or potential cloud infrastructure provider |
| Amazon Web Services (AWS) | Cloud infrastructure, compute, storage, networking, security, databases, logging, and related platform services | Customer content, uploaded files, workspace data, metadata, logs, infrastructure data | EEA / USA, depending on selected AWS region | May be used as part of Nairo’s infrastructure migration, redundancy, or selected customer deployments |
| Google Cloud SQL / PostgreSQL | Managed database infrastructure and data storage | Customer content, workspace data, account data, metadata, operational data | EEA / USA, depending on configuration | Database infrastructure where deployed on Google Cloud |
| Amazon RDS / Aurora PostgreSQL | Managed database infrastructure and data storage through AWS | Customer content, workspace data, account data, metadata, operational data | EEA / USA, depending on selected AWS region | May be used as part of AWS-based deployments or migration |
| Google Cloud Storage | Object storage and file storage | Uploaded files, documents, extracted content, metadata, customer-provided content | EEA / USA, depending on configuration | Storage infrastructure where deployed on Google Cloud |
| Amazon S3 | Object storage and file storage through AWS | Uploaded files, documents, extracted content, metadata, customer-provided content | EEA / USA, depending on selected AWS region | May be used as part of AWS-based deployments or migration |
| Google Cloud Logging / Monitoring | Infrastructure monitoring, logging, diagnostics, and reliability | Technical logs, service metadata, operational events, limited diagnostic information | EEA / USA, depending on configuration | Used to monitor platform reliability, security, and performance where deployed on Google Cloud |
| Amazon CloudWatch | Infrastructure monitoring, logging, diagnostics, and reliability through AWS | Technical logs, service metadata, operational events, limited diagnostic information | EEA / USA, depending on selected AWS region | May be used as part of AWS-based deployments or migration |
| Provider | Purpose | Data processed | Region | Notes |
|---|---|---|---|---|
| Clerk | Authentication, identity management, user management, session management, and login persistence | User identities, authentication data, account identifiers, session metadata, login activity | USA / EEA, depending on configuration | Used for user authentication, session management, and identity services |
| Cloudflare | Website hosting, DNS, CDN, traffic routing, security, performance, and analytics where enabled | Website traffic data, IP addresses, device and browser data, security logs, request metadata | Global / EEA / USA, depending on routing and service configuration | Used for website delivery, security, performance, and related infrastructure services |
| Google Analytics / Google Tag | Website analytics, traffic measurement, engagement analysis, and service improvement where enabled | Website usage data, device and browser data, approximate location, traffic sources, interaction data | USA / EEA, depending on configuration | Non-essential analytics provider used only where enabled and, where required, subject to consent |
| Email and communications provider | Email delivery, operational communications, support, and customer communications | Contact details, email metadata, communication content | EEA / USA | Used where enabled. Details available on request. |
| Customer support and communication tools | Support, onboarding, customer communication, and issue resolution | Contact details, support requests, communication content, account or workspace context where relevant | EEA / USA | Used where enabled. Details available on request. |
Nairo may use third-party AI providers to support certain AI-powered features, including document analysis, information extraction, summarization, retrieval, reasoning, classification, and generation.
Nairo does not use Customer Data, including uploaded documents, prompts, outputs, workspace content, or AI interactions, to train public or shared artificial intelligence models.
Where third-party AI providers are used, Nairo seeks to use providers, configurations, and contractual terms intended to prevent Customer Data from being used to train public or shared models, subject to the applicable provider terms and customer agreement.
Certain limited technical processing, transient storage, safety filtering, abuse monitoring, logging, or operational handling by third-party providers may occur as part of providing the services, subject to applicable contractual, technical, and security safeguards.
Nairo may update this Subprocessors List from time to time as our services, infrastructure, security practices, product functionality, and provider relationships evolve.
Where required by applicable law, contract, or customer agreement, Nairo will provide notice of material changes to subprocessors.
The “Last updated” date at the top of this page indicates when the latest version became effective.
If you have questions regarding this Subprocessors List or Nairo’s use of third-party service providers, subprocessors, or infrastructure providers, please contact:
People Future S.L.
Commercial name: Nairo
Calle San Germán 10
28020 Madrid, Spain
Email: privacy@nairobilabs.com
Website: https://nairobilabs.com
For more information about personal data processing, see our Privacy Notice.
