Privacy
Sub-processors. Who receives your data, and why.
The third parties that receive personal or customer data from the platform, the public demo and this website. Last updated October 2026.
This page describes what the software sends and to whom. It is not a contract, and Nyquist is not yet a legal entity (see Company). A provider that needs an account key is called only when we hold one. We do not train models on customer data; what a provider may do with the text it receives is set by that provider’s own terms, linked in the first column. How we collect and use data is described in the privacy policy.
Sent by our servers
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Microsoft Azure Provider terms ↗ | Hosts the platform, the public demo, the API and the databases. Nightly database dumps are stored in Azure storage and deleted after 14 days. A weekly test restore of a dump runs on a separate Azure database server. | Everything the platform stores: account details, uploaded books and files, calculation runs and the audit log. | EU: Sweden Central (servers); North Europe (weekly test restore). |
| Microsoft Azure AI Document Intelligence Provider terms ↗ | Reads scanned PDF statements. Called only when you upload a scan; pages that already contain text are read on our side and are not sent. | The scanned pages of the file, up to six per file. The recognised layout is cached on our server for 24 hours. | EU: Sweden Central. |
| Cloudflare Provider terms ↗ | DNS for our domains. Forwards e-mail sent to some of our @nyquist.pro addresses. Measures page loads on getnyquist.com, the platform and the demo (Web Analytics, no cookies). | DNS queries; e-mail you send to those addresses; the address of the page and load-time measurements. | Global network, not limited to the EU. |
| PostHog Cloud US Provider terms ↗ | Product analytics in the signed-in platform and in the public demo. Sessions are recorded in the public demo only; the signed-in platform is not recorded. Not loaded on this website. | Pages opened, clicks on interface elements, JavaScript errors, page timings and browser details. In the platform, a signed-in user is identified by an internal account number, never by name or e-mail. A demo recording includes what the visitor types, except password, login, e-mail, phone and one-time-code fields. | United States. |
| Resend Provider terms ↗ | Sends our e-mail: receipts for access requests, invitation codes, notices to us about new requests and invitations to the research survey. | Recipient address and message text. For survey invitations also the delivery events: delivered, opened, link followed, bounced, marked as spam. | Provider-operated; the region is chosen by the provider. |
| NVIDIA NIM Provider terms ↗ | First choice for language-model inference when you use a model feature: the Nyx assistant, written summaries of calculation results and routing of questions. Also builds search vectors for stored analytic objects and proposes column mappings when you import a portfolio file. | Your question and the platform results needed to answer it, which can include positions and calculation outputs. Text summaries of stored analytic objects, for search. For file import: column headers with long digit runs masked, and column statistics; the import step never sends cell values. | Provider-operated; the region is chosen by the provider. |
| Cerebras Provider terms ↗ | Second choice for language-model inference, used when the first provider is unavailable or rate-limited. Not used for file import or search vectors. | Your question and the platform results needed to answer it. | Provider-operated; the region is chosen by the provider. |
| OpenRouter Provider terms ↗ | Last choice for language-model inference, used when the earlier providers fail. It forwards each request to the model host it selects. Not used for file import or search vectors. | Your question and the platform results needed to answer it. | Provider-operated; requests are forwarded to hosts the provider selects. |
| Telegram Provider terms ↗ | Delivers alerts and bot messages if you link a Telegram account, and carries the Mini-App if you open the platform inside Telegram. | The alert and bot messages sent to your chat, and the Telegram account identifier used to link your account. | Telegram’s own infrastructure. |
| Slack Provider terms ↗ | Delivers alerts to a channel or direct message, only if your workspace installs our Slack app. | The alert text: severity, source, message and details. | Slack’s own infrastructure. |
Contacted by your browser
These providers receive a request straight from your browser, without passing through our servers, so they see your IP address.
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| OpenFreeMap Provider terms ↗ | Serves the base map on the map pages of the platform. Your browser requests the tiles directly. | Your IP address and the map area you view. | Provider-operated. |
| Moscow Exchange ISS | Public bond catalogue on the bond-market page of the platform. Your browser requests it directly. | Your IP address and the trading board requested. | Provider-operated. |
Not listed
- Umami website analytics runs on our own Azure server, so its data does not leave our infrastructure.
- Public market-data sources are queried by our servers using instrument or series identifiers, including identifiers you enter. No account details or personal data are sent with them.
Changes
We update this page when we add or remove a provider that receives personal or customer data. In a dedicated VPC or on-premise deployment, model inference is configured by contract.
Contact
For privacy and data sovereignty inquiries: privacy@nyquist.pro