# Nebius Nebius declares [7 subprocessors](https://thirdpartyindex.com/vendors/nebius#subprocessors), plus 7 of its own affiliates, in [its subprocessor list](https://docs.nebius.com/legal/sub-processors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/4564)). They include [Microsoft](https://thirdpartyindex.com/vendors/microsoft), [Slack](https://thirdpartyindex.com/vendors/slack) and [HubSpot](https://thirdpartyindex.com/vendors/hubspot). No published changes since we first read it on 2026-09-22. [18 tracked vendors](https://thirdpartyindex.com/vendors/nebius#used-by) name Nebius as a subprocessor, including [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare), [Datadog](https://thirdpartyindex.com/vendors/datadog) and [Baseten](https://thirdpartyindex.com/vendors/baseten). Nebius (nebius.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/nebius - Documents last verified: 2026-11-11 - Category: cloud-infrastructure - Transparency rating: 90/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 5 tracked vendors directly, 58 within two hops, 287 within three; 18 tracked vendors rely on it directly, 1237 within two hops, 2695 within three - Cite as: Nebius, Third Party Index, https://thirdpartyindex.com/vendors/nebius (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://nebius.com/trust-center | 2026-11-11 | 2026-09-29 | | Subprocessor list | https://docs.nebius.com/legal/sub-processors | 2026-11-11 | 2026-09-22 | | Data processing addendum | https://docs.nebius.com/legal/dpa | 2026-11-11 | 2026-09-22 | | Privacy policy | https://docs.nebius.com/legal/privacy | 2026-11-11 | 2026-11-11 | | Terms | https://docs.nebius.com/legal/terms-of-use | 2026-11-11 | 2026-09-30 | | security.txt | https://nebius.com/.well-known/security.txt | 2026-11-11 | 2026-09-22 | | Status page | https://status.nebius.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (7) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Atlassian Pty Ltd. (Jira)](https://thirdpartyindex.com/vendors/atlassian.md) | Customer support and ticket handling | Entity location: Australia; Processing location (country or region): EU, US with respect to Atlassian Rovo inference services | 2026-09-22 | | EdTech Plus Tech d.o.o. Beograd | Service engineering, operations, maintenance and technical support | Entity location: Serbia; Processing location (country or region): Serbia | 2026-09-22 | | [Functional Software, Inc. (Sentry)](https://thirdpartyindex.com/vendors/sentry.md) | Application Performance; Monitoring & Error / Bug Tracking | Entity location: United States; Processing location (country or region): US | 2026-09-22 | | [Hubspot, Inc.](https://thirdpartyindex.com/vendors/hubspot.md) | Delivery of customer communications, such as in-product messages and emails | Entity location: United States; Processing location (country or region): EU, US | 2026-09-22 | | [Microsoft Corporation (Sentinel)](https://thirdpartyindex.com/vendors/microsoft.md) | Customer communications;; Security Information and Event Management | Entity location: United States; Processing location (country or region): EU | 2026-09-22 | | [Slack Technologies, LLC](https://thirdpartyindex.com/vendors/slack.md) | Customer communications;; Customer support | Entity location: United States; Processing location (country or region): EU | 2026-09-22 | | Tech Hub IL Ltd. | Service engineering, operations, maintenance and technical support | Entity location: Israel; Processing location (country or region): Israel | 2026-09-22 | Read from ([evidence](https://thirdpartyindex.com/evidence/4564)). CSV: https://thirdpartyindex.com/vendors/nebius/subprocessors.csv ### Its own affiliates (7) - Nebius Inc. (Entity location: Germany; Entity location: Netherlands; Entity location: United States; Processing activity (country or region): Provision of cloud infrastructure for processing Customer Content in the Customer-selected region; Processing location (country or region): Germany; Processing location (country or region): Netherlands; Processing location (country or region): Unites States; Processing location: France, Iceland, United Kingdom, Finland; Processing location: United States) - Nebius AI Spain S.L.U. (Entity location: Spain; Processing location (country or region): Spain) - Nebius CZ s.r.o. (Entity location: Czech Republic; Processing location (country or region): Czech Republic) - Nebius DC Oy (Entity location: Finalnd; Processing location (country or region): Finland) - Nebius France SAS (Entity location: France; Processing location (country or region): France) - Nebius Israel Ltd. (Entity location: Israel; Processing activity (country or region): Provision of cloud infrastructure for processing Customer Content in the Customer-selected region; Processing location (country or region): Israel; Processing location: Israel) - Nebius UK Ltd. (Entity location: United Kingdom; Processing location (country or region): United Kingdom) ## Web Technologies Nebius's homepage made 314 requests to 39 domains, 19 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 19 third parties by category: Advertising 8 (Google Cloud, X Corp., Reddit, Inc., StackAdapt; reviewed: Index Exchange Inc.; usually detected as Advertising: Microsoft, Magnite, Inc., PubMatic); Analytics 6 (TikTok, Demandbase, LinkedIn, Meta, Contentsquare, TikTok); Marketing automation 1 (HubSpot); Cookie compliance 1 (OneTrust); CDN 1 (jsDelivr); Customer data platform 1 (reviewed: LiveRamp); Unclassified 1 (Jobster AdTech B.V.). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (19) - Google Cloud: 49 requests to google.com, doubleclick.net, googletagmanager.com, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager - OneTrust: 11 requests to cookielaw.org, onetrust.com; OneTrust - Microsoft: 10 requests to clarity.ms, bing.net (its subprocessor list names it too) - X Corp.: 9 requests to t.co, twitter.com, ads-twitter.com; Twitter Ads - TikTok: 7 requests to tiktok.com; TikTok Pixel - HubSpot: 6 requests to hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hubapi.com, hubspot.com; HubSpot (its subprocessor list names it too) - Demandbase: 4 requests to company-target.com, demandbase.com; Demandbase 11.9.0 - LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag - Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435 - Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads - Contentsquare: 2 requests to contentsquare.net; Contentsquare - Magnite, Inc.: 2 requests to rubiconproject.com, tremorhub.com - Index Exchange Inc.: 1 request to casalemedia.com - Jobster AdTech B.V.: 1 request to jobster.com - LiveRamp: 1 request to rlcdn.com - PubMatic: 1 request to pubmatic.com - StackAdapt: 1 request to stackadapt.com; StackAdapt - TikTok: 1 request to tiktokw.us; TikTok Pixel - jsDelivr: 1 request to jsdelivr.net; jsDelivr ### Unknown (1) Domains not identified yet: equitystory.com ### First party (1) - Nebius: 197 requests to nebius.com, nebius.cloud; Apollo, Azure, Azure Front Door, GraphQL, HSTS, Hotjar, Linkedin Ads, Microsoft Clarity, Next.js 16.4.3, Open Graph, PWA, Priority Hints, React, Webpack, core-js 3.32.2, TypeScript 11 tracked companies loaded by the homepage are not in Nebius's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (18) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Act Security](https://thirdpartyindex.com/vendors/act-security.md): Cloud infrastructure and hosting - [Applied Compute](https://thirdpartyindex.com/vendors/applied-compute.md): Cloud infrastructure for AI - [Baseten](https://thirdpartyindex.com/vendors/baseten.md): Cloud Compute - [Brave](https://thirdpartyindex.com/vendors/brave.md): Cloud infrastructure - [Cerebrium](https://thirdpartyindex.com/vendors/cerebrium.md): Cloud infrastructure provide; GPU compute for customer workloads - [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md): Workers AI - [Cursor](https://thirdpartyindex.com/vendors/cursor.md): Inference Provider; Inference infrastructure provider for hosting and serving first party AI models. - [Datadog](https://thirdpartyindex.com/vendors/datadog.md): AI services - [Daytona](https://thirdpartyindex.com/vendors/daytona.md): Cloud Infrastructure - [EvaluAgent](https://thirdpartyindex.com/vendors/evaluagent.md): AI infrastructure, hosting and compute services. - [Inception Labs](https://thirdpartyindex.com/vendors/inceptionlabs-ai.md): Cloud infrastructure provider used to support the training and serving of large language models.; Cloud provider - [Krisp](https://thirdpartyindex.com/vendors/krisp.md): Backend support for certain product features; Our partnership with Nebius AI is exclusive to our AI Meeting Assistant product, ensuring that the data of our use… - [Modal](https://thirdpartyindex.com/vendors/modal.md): Cloud hosting provider - [monday.com](https://thirdpartyindex.com/vendors/monday-com.md) - [Neuralwatt Cloud](https://thirdpartyindex.com/vendors/neuralwatt-cloud.md): GPU cloud infrastructure and AI compute services - [Shopify](https://thirdpartyindex.com/vendors/shopify.md): Optimizing computational workloads and hosting technical environments - [TypeSafe AI](https://thirdpartyindex.com/vendors/typesafe-ai.md): AI Infrastructure; Customer AI prompts are processed, but not stored, on compute nodes managed by Nebius - [VESSL AI](https://thirdpartyindex.com/vendors/vessl-ai.md): GPU/CPU compute for customer workloads ## Service status Incidents it reported on its own status page. - Last 90 days: 30 reported incidents (19 major or critical, 8 minor, 3 with no impact stated) - Typical time to resolve: 3 h 5 min - Status page last read: 2026-11-12 - 2026-11-11: Token Factory connectivity loss in tf-us2 (no impact stated) - 2026-11-09: Compute Cloud: some hosts unreachable in eu-north1 (major) - 2026-11-06: Network problems (critical) - 2026-11-05: Token Factory: some models unavailable in eu-north1 (major) - 2026-11-02: Public API gateway partially unavailable in US-NORTH1 and US-CENTRAL1 (minor) - 2026-10-31: Token Factory: some dedicated endpoints partially unavailable (minor) - 2026-10-28: Compute Cloud: disk images and snapshots partial unavailability (major) - 2026-10-24: Token Factory 503 errors in eu-west2 (major) ## Incidents reported by Nebius's subprocessors Incidents reported in the last 30 days on their own status pages by 2 vendors Nebius lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported US issues feed throwing intermittent errors (minor) - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Account emails not being delivered (major) - 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported EU region replay ingestion latency (minor) - 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Nebius lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Ingestion delays across all data (minor) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Delays in spans and transactions processing (major) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Sentry.io dashboard and API is down (critical) - 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Sentry dashboard is down (critical) - 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Nebius lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated) - 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Nebius lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Nebius lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Increased latency processing integration webhooks (minor) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Sentry.io not loading in US region (critical) - 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Sentry.io not loading (major) - 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Sentry is down (critical) - 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Nebius lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/nebius ## Security contact From its security.txt (https://nebius.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/3837)): - Contact: mailto:security@nebius.com - Languages: en - Valid until 2027-12-31 --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api