Sub-processors
Last updated: May 2, 2026
Authorised third parties that process Personal Data on behalf of NordScope, with at least 30 days advance notice of changes per GDPR Article 28(2).
Change notification
We will notify you of any intended changes to sub-processors at least 30 days in advance. You may object in writing within 14 days. If we cannot accommodate your objection, you may terminate the service.
Subscribe to change notifications: sub-processor-updates@portalpilot.io
Authorised sub-processors
Sub-processor list last updated: 2026-05-01
| Sub-processor | Purpose | Location | Data processed |
|---|---|---|---|
| Hetzner Online GmbH | Infrastructure hosting (self-hosted Supabase) | EU (Finland) | Account data, analysis data, audit logs |
| Mollie B.V. | Payment processing | EU (Netherlands, PCI DSS) | Payment details (not stored by us) |
| Mistral AI | AI-powered suggestions, descriptions, embeddings | EU (Paris, France) | Property metadata — anonymized names/descriptions (not stored) |
| Lettermint B.V. | Transactional email delivery (account notifications, analysis reports, team invitations, authentication emails) | EU (Netherlands) | Email addresses, email template content |
HubSpot is not a sub-processor
PortalPilot connects to your HubSpot portal via OAuth 2.0 as your authorised integration. HubSpot is your own platform — not a sub-processor engaged by NordScope. We access it solely on your instruction to provide the analysis service.