Sub-processors
Under GDPR Article 28 we publish the sub-processors that handle personal data on our behalf.
Current Sub-processors
| Provider | Purpose | Data Processed | Location |
| Amazon Web Services | Hosting, database, authentication | Account data, study progress, quiz scores | ap-southeast-2 (Sydney) |
| Stripe | Payment processing | Name, email, billing address, payment token | United States |
| Amazon SES | Transactional email | Email address, message content | ap-southeast-2 (Sydney) |
| Google Analytics 4 | Website analytics | Anonymised usage data, page views | United States |
| Google reCAPTCHA | Anti-spam on contact form | IP address, browser signals | United States |
International Transfers
Transfers outside your country are covered by providers' Standard Contractual Clauses.
Changes
We notify you by email at least 14 days before a new sub-processor begins handling your data.
Data Controller
Nested Technology Group Pty Ltd, ABN 54 698 422 552, Queensland 4113, Australia. Email: support@nestedcerts.com
JavaScript is required to use this application.
Please enable JavaScript in your browser to access the full NestedCerts platform.
Contact: support@nestedcerts.com