Subprocessors
Last updated: 01/09/2025
Who we are
NightShield AI Ltd ("NightShield") acts as a data processor to venue customers (the data controllers) when we provide AI incident detection and alerting. To run the service, we use a small number of vetted third parties ("subprocessors").
Change notice
We'll update this page before adding or replacing a subprocessor. To get notifications, email privacy@nightshield.ai with the subject "Subscribe to subprocessor updates." You may object within 30 days on reasonable data-protection grounds.
Data we process (typical)
- Short video clips generated from your CCTV (faces may be visible)
- Metadata (timestamps, camera labels, incident tags)
- Alert recipient details (names, phone numbers, emails)
- Operational logs (service health; minimised/pseudonymised)
Default retention
Clips 24–72h (customer-configurable). Logs/metrics 30–90 days. Encryption in transit and at rest.
Current subprocessors
| Vendor | Role | Purpose | Data categories | Region(s) & storage | Transfer mechanism | DPA |
|---|---|---|---|---|---|---|
| Amazon Web Services (AWS) | Hosting & storage | Run application, store incident clips/metadata | Clips, metadata, logs | UK/EU regions (e.g., eu-west-2/eu-west-1) | N/A (processed in UK/EU regions) | AWS GDPR terms |
| Twilio | SMS/Push gateway | Deliver incident alerts to staff devices | Recipient phone numbers, alert payload (no full video) | EU processing where available; global delivery | SCCs/UK IDTA as needed | Twilio DPA |
| Google Workspace | Email/support | Handle support and account emails | Names, emails, ticket context | EU data centres (where applicable) | SCCs/UK IDTA as needed | Google DPA |
No other subprocessors at this time. We minimise data sent to each provider (e.g., alerts carry metadata/links, not video files).
Cross-border transfers
Where processing involves transfers outside the UK/EEA, we rely on SCCs/UK IDTA and apply supplementary measures (encryption, minimisation). Storage/processing of clips/metadata defaults to UK/EU regions.
Objecting to a subprocessor
If you have reasonable grounds to object, email privacy@nightshield.ai within 30 days of our notice. We'll work to provide an alternative or modify the service. If we can't, your remedies are in the MSA.
Related Documents
This subprocessor list is referenced in our Data Processing Addendum (DPA).
For the complete legal framework, please see our Master Service Agreement (MSA).
Contact Us
For questions about our subprocessors or to subscribe to updates, please contact us at privacy@nightshield.ai
For general legal inquiries, please contact legal@nightshield.ai