Sub-Processors
Last updated: 06 December 2024
To support NMI and its affiliates (NMI) in delivering its services, NMI engages Sub-Processors to assist NMI with its data processing activities on behalf of NMI.
What is a Sub-processor?
When NMI engages third party service providers in our capacity as a data processor for our customers personal data, the General Data Protection Regulation (“GDPR”) and a number of other global privacy frameworks call these third-party service providers Sub-Processors. Sub-processors are service providers who have or potentially will have access to or process personal data that NMI processes for, and on behalf of, NMI.
This page outlines which Sub-Processors we utilize, the type of data we send them, the purpose as to why we send them this data, and the residency of the entity.
Updates to this list
Due to the nature of our global business, our business needs and services providers may change from time to time.
We will periodically update this page to reflect additions and removals to our list of Sub-Processors and Affiliates.
Under the terms of our Data Processing Addendum (DPA), if you are a contracting party, you may reasonably object in writing to the processing of your personal data by a new Sub-Processor within 14 days following the update of this page.
If you do not object during the 14 day time period, the appointment of the new Sub-Processor shall be deemed accepted.
For more information on NMI’s privacy practices, please visit our Privacy Policy. If you have any questions regarding this page, please contact us.
List of Sub-processors
|
Sub Processor |
Data Type |
Purpose |
Entity Residency |
|
AIB |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
EU |
|
American Express |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
EU |
|
Barclaycard |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
EU |
|
Chase Paymentech |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Credorax/Finaro/Shift4 – ePower |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
EU |
|
Elavon |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
EU/ USA |
|
F5 Silverline |
End User Data Included in User Interactions, API Calls, and Queries |
L7 WAF Cloud Service Provider |
USA |
|
First Data/Fiserv |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
CAN / EU/ AUS/ USA |
|
Globalpayments |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
EU/ USA |
|
Heartland |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Lloyds |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
EU |
|
Logz.io |
Business User and End User Data emitted in application and security event logs |
Centralized logging and SIEM provider |
USA |
|
Moneris |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Network Merchants LLC (NMI) |
End User Data Required to Complete Transactions |
Sister entity providing transaction processing services in the USA |
USA |
|
Sinch |
End user data required for transaction receipt delivery over SMS |
Communications PaaS provider for SMS |
EU |
|
TNS |
End User Data Required to Complete UK Financial Transactions |
Financial networks connectivity provider |
EU |
|
TSYS |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Worldpay |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA/ EU |
|
Worldpay/ Vantiv |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Sub Processor |
Data Type |
Purpose |
Entity Residency |
|
ACH Direct |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Alternative Payments International |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
BlueSnap |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
BluSky |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Borgun |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Iceland |
|
Braintree |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Braspag |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Brazil |
|
BrasPag V2 |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Brazil |
|
Caledon |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
CAN |
|
Cardinal Commerce |
End User Data Required to Complete 3DS Authentication |
Financial Acquirer Solution provider |
USA |
|
CardWorks |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Cashflows |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Chase Paymentech Salem |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
CheckGateway |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Checkout.com Unified Payments |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Checks2Green |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
CollectPay |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
CollectPay Credit Card |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
CollectPay Plus |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
CreditGuard |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Credomatic Web Service |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Costa Rica & USA |
|
CredoRax |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Israel |
|
CredoRax v2 |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Israel |
|
EFTBOP, LLC |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Elavon |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Electronic Check Multi-Location |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
eMerchantPay |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
EPX |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Evertec |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
EVO |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
F5 Silverline |
End User Data Included in User Interactions, API Calls, and Queries |
L7 WAF Cloud Service Provider |
USA |
|
FACe – ProPay |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
First Data Canada |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
First National Bank of Omaha ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Giact |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Global Payments Canada |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
CAN/ USA |
|
Google LLC |
User interactions and IP Address |
Google Cloud Service |
USA |
|
Heartland Payment Systems |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
IntegraPay ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
AUS |
|
iStream ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
KBank |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Thailand |
|
Logz.io |
Business User and End User Data emitted in application and security event logs |
Centralized logging and SIEM provider |
USA |
|
Maverick Payments LTD |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
UK |
|
MeS Payment Gateway |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
NCR Payment Solutions/ JetPay |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Network Merchants LLC (NMI) |
End User Data Required to Complete Transactions |
Sister entity providing transaction processing services in the USA |
USA |
|
NPC Electronic Check |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Nuvei |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
CAN |
|
Nuvei Digital Payments |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
CAN |
|
Optimal Payments |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
UK |
|
Optimal Payments Canada Check |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
UK |
|
Optimal Payments Check |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
UK |
|
PASPX |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Paya (formerly GETI) |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Payliance |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Payment World |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Paymentech Salem Check |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Paysafe |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Paysafe Processing PxP |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
UK |
|
Plug n Pay |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
PowerCARD |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Barbados |
|
Priority MX Merchant |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
ProfitStars ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Profituity ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
ProPay |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
ProPay ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
RS2 Software |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Malta |
|
Santander |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
El Salvador |
|
Secure Payment Systems ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Smart Payments |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
TNS |
End User Data Required to Complete UK Financial Transactions |
Financial networks connectivity provider |
EU |
|
Transact Europe (aka Ryvyl) |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Bulgaria |
|
Transact Pro |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
Latvia |
|
TSYS |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Turnkey Payments (TPE) |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Turnkey Payments (TPE) ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Twilio |
Business User and End User Data |
Communications PaaS provider for voice and SMS |
USA |
|
USAG ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Vantiv Now Worldpay Core |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Vericheck ACH |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Voicepay |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Sub Processor |
Data Type |
Purpose |
Entity Residency |
|
Chase Paymentech – Tampa – UTF 1.97 |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Elavon – Encompass 4.028 |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
EPX – PostAPI |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
F5 Silverline |
End User Data Included in User Interactions, API Calls, and Queries |
L7 WAF Cloud Service Provider |
USA |
|
FD |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Global – East Version 2014.002 |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Heartland |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Logz.io |
Business User and End User Data emitted in application and security event logs |
Centralized logging and SIEM provider |
USA |
|
MeS |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Planet Payment |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
RapidConnect |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
TSYS |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Twilio |
Business User and End User Data |
Communications PaaS provider for voice and SMS |
USA |
|
Vantiv |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
WorldPay |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
WorldPay RBS |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider |
USA |
|
Bluefin |
End User Data Required to Complete Transactions |
P2PE Decryption Solution provider |
USA |
|
Virtucrypt (FutureX) |
End User Data Required to Complete Transactions |
P2PE Decryption Solution provider |
USA |
|
Actum Processing |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider (ACH) |
USA |
|
CheckGateway |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider (ACH) |
USA |
|
EFT BOP |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider (ACH) |
USA |
|
Paya |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider (ACH) |
USA |
|
Payliance |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider (ACH) |
USA |
|
ReliaFund |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider (ACH) |
USA |
|
RP Solutions |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider (ACH) |
USA |
|
Vericheck |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider (ACH) |
USA |
|
Vericheck Veer |
End User Data Required to Complete Transactions |
Financial Acquirer Solution provider (ACH) |
USA |
|
Google LLC |
User interactions and IP Address |
Google Cloud Service |
USA |
|
Sub Processor |
Data Type |
Purpose |
Entity Residency |
|
AlertLogic |
System information and architecture, server vulnerabilities, system logs, server filesystem contents |
Intrusion detection and managed detection response, file integrity monitoring |
UK |
|
AWS |
All customer data |
Infrastructure hosting provider |
USA + CAN |
|
CloudFlare |
End User Data Included in User Interactions, API Calls, and Queries |
L7 WAF Cloud Service Provider |
USA |
|
ComplyAdvantage |
Business: Name Owner: Name |
Watchlist/sanctions monitoring. |
USA |
|
Datadog |
System information, system logs, database metadata |
System monitoring and observability |
USA |
|
Equifax |
Owner/ControlPerson: Name, TIN, Address, Phone |
ScanX Credit (Individual) – Depracted |
USA |
|
Esendex |
User’s Phone Number |
2FA phone authentication |
USA |
|
EverC |
Business: Name, Website, Address, Email, Phone |
Merchant webcrawl risk detection and post-approval website monitoring |
USA |
|
Experian |
Owner/ControlPerson: Name, TIN, Address, Phone |
ScanX Credit (Individual) |
USA |
|
Experian Business |
Business: Name, TIN, Address, Phone Owner/ControlPerson: Name, TIN, Address, Phone |
ScanX Credit (Business) |
USA |
|
G2 Web Services |
Business: Name, Website, Address, Email, Phone. Owner: Name, Address, Email, Phone |
Merchant website monitoring |
USA |
|
Giact (LSEG) |
Business: Name, TIN, Address, Phone. Owner/ControlPerson: Name, TIN, Address, Phone, Email, IP Address. Banking: Name on Account, Routing #, Account # |
ScanX Identity & Banking Data – utilized by majority |
USA |
|
IRIS CRM |
Business and Owner PII Data, Underwriting Results |
Share Merchant & Underwriting data between systems. |
USA |
|
KYC Sitescan |
Business: Name, Address, Phone, Website. Owner/ControlPerson: Name, Address, Phone |
ScanX webcrawl |
USA |
|
LexisNexis |
Business: Name, TIN, Address, Phone. Owner/ControlPerson: Name, TIN, Address, Phone. |
ScanX Identity Data |
USA |
|
Mastercard |
Business: Name, Tax ID, Address, Phone. Owner/ControlPerson: Name, Tax ID, Address, Phone |
ScanX MATCH Integration |
USA |
|
Microbilt |
Banking: Name on Account, Routing #, Account # |
ScanX Banking Risk |
USA |
|
Mixpanel |
User Browser Information, Customer Name, City, System role, AEX System Info (eg user ID, system IDs), MCC Code, ScanX Score, decision reason. |
Product Insights / Usage Analytics |
USA |
|
Paya ACH Boarding API |
Business and Owner PII Data |
Boards merchants to Paya for ACH Processing |
USA |
|
Rollbar |
API Error Message, Scorecard Id |
Provides real-time error tracking for ScanX API errors returned by providers. |
USA |
|
Salesforce |
Business and Owner/ControlPerson PII Data |
Customers can have AEX send data to their respective Salesforce environments (eg. Create/Update Accounts and Contacts) |
USA |
|
Segment |
User Browser Information, Customer Name, City, System role, AEX System Info (eg user ID, system IDs), MCC Code, ScanX Score, decision reason. |
Usage analytics database |
USA |
|
Business: Name, Tax ID. Owner/ControlPerson: Name/TaxID |
Tax ID Verification |
USA |
|
|
TransUnion Canada |
Owner/ControlPerson: Name, TIN, Address, Phone |
ScanX Credit Canada (Individual) |
CAN |
|
TransUnion USA |
Owner/ControlPerson: Name, TIN, Address, Phone |
ScanX Credit (Individual) |
USA |
|
Userpilot |
User Id, Name, Email |
In-App usage analytics events reporting |
USA |
|
Sub Processor |
Data Type |
Purpose |
Entity Residency |
|
Aperia |
PAN, PAN Expiration date, DBA, DBA email address, Owner’s name, MID, DDA, DBA |
Risk Monitoring; ACH Returns; chargeback retrieval |
USA |
|
Merrick |
PII (name, DOB, SSN, Address), DDA, ABA, PCR,DBA information |
Sponsor Bank |
USA |
|
Caine & Weiner |
PII (name, DOB, SSN, Address), DDA, ABA, DBA information |
Collections |
CAN |
|
GIACT |
Name, address, DOB, SSN |
Bank account validation |
USA |
|
Experian |
Name, address, DOB, SSN, email address, TIN – legal and DBA information on the business, and bank ABA/DDA . |
Identity verification and credit check |
IRE |
|
Chase |
Merchant |
First Party Processor |
USA |
|
Elavon |
Merchant |
First Party Processor |
USA |
|
EPX |
Merchant |
First Party Processor |
USA |
|
Fiserv |
Merchant |
First Party Processor/ACH Operator |
USA |
|
Global Payments |
Merchant |
First Party Processor |
USA |
|
TSYS |
Merchant |
First Party Processor |
USA |
|
Bank of America |
Merchant |
ACH Operator |
USA |
|
Truist |
Merchant |
ACH Operator |
USA |
|
Jack Henry |
Merchant |
ACH Operator |
USA |
|
Salesforce |
PII – Name, email, phone number, business address |
CRM |
USA |
|
Sub Processor |
Data Type |
Purpose |
Entity Residency |
|
Twilio |
Business User and End User Data |
Communications PaaS provider for voice and SMS |
USA |
|
Fiserv |
Merchant |
Merchant account boarding |
USA |
|
FIS Worldpay (Vantiv) |
Merchant |
Merchant account boarding |
USA |
|
Priority Payment Systems |
Merchant |
Merchant account boarding |
USA |
|
TSYS |
Merchant |
Merchant account boarding |
USA |
|
Paysafe |
Merchant |
Merchant account boarding |
USA |
|
Clearent |
Merchant |
Merchant account boarding |
USA |
|
Elavon |
Merchant |
Merchant account boarding |
USA |
|
Fundomate |
Merchant |
Merchant funding requests |
USA |
|
Conformance |
Merchant |
Merchant underwriting |
USA |
|
Agreement Express |
Merchant |
Merchant underwriting |
USA |
|
Paya |
ACH account holder |
ACH transactions |
USA |
|
NMI |
Merchant, cardholder |
Gateway boarding, card transactions |
USA |
|
USAePay |
Merchant |
Gateway boarding |
USA |
|
Authorize.Net |
Merchant, cardholder |
Gateway boarding, card transactions |
USA |
|
Paytrace |
Merchant, cardholder |
Card transactions |
USA |
|
Zapier |
Lead |
Automation with 3rd party systems |
USA |
|
Encytro |
Merchant |
PCI boarding and reporting |
USA |
|
ControlScan/Sysnet/VikingCloud |
Merchant |
PCI boarding and reporting |
USA |
|
Lob |
Merchant |
Merchant owner birthday postcards |
USA |
|
Esquire Bank |
Merchant |
Merchant account boarding |
USA |
|
Westamerica Bank |
Merchant |
Merchant account boarding |
USA |
|
Ambition |
User |
User performance tracking |
USA |
|
Bugsnag |
No PII, errors |
Error monitoring service |
USA |
|
PusherJS |
Lead |
Websockets service – Events (like, lead note added) |
USA |
|
Google Maps |
Lead Address |
Address autocomplete based on search results |
USA |
|
Google Calendar |
User |
User can sync their google calendars |
USA |
|
Google GMail |
User |
User can send emails using their gmail accounts |
USA |
|
Microsoft Calendar |
User |
User can sync their outlook calendars |
USA |
|
Microsoft Outlook |
User |
User can send emails using their outlook accounts |
USA |
|
Google Firebase |
Notifications |
Mobile App – Device Notifications |
USA |
|
Atlassian (Jira) |
Mixed |
Tasks, Epics, might contain some data |
USA |
|
Google Drive |
Mixed |
Share securely files inside the company |
USA |
|
Arcum |
Merchant processing data |
Retention analysis |
USA + CAN |
|
Name |
Data Type |
Purpose |
Entity Residency |
Product |
|
Authvia |
Phone number |
Text 2 pay |
USA |
Authvia |
|
G+D |
Card Holder information |
Network Tokenization |
USA |
Network Tokens |
|
Mastercard |
Merchant information, Card Holder information |
Provision of card brand tokens |
USA |
Network Tokens |
|
Kount |
Personal Identifying information |
Fraud Scrubbing |
USA |
Kount Fraud scrubbing |
|
Biller Genie |
Merchant information |
Sign merchant up for Biller genie |
USA |
Biller Genie |
|
Litle / TSYS |
Card holder information |
Automatic Updater |
USA |
Account Updater |
|
Worldpay |
Card holder information |
Automatic Card Updater |
USA |
Automatic Card Updater |