/

Companies / NDGM / Subprocessors

NDGM subprocessors

ndgm.co.uk

NDGM provides identity governance software that discovers human, service account and AI agent identities across a customer's estate, then rotates credentials, vaults secrets and produces auditor-ready evidence. It serves organisations that need to govern machine and human identities continuously rather than through periodic reviews.

Summarized from its homepage on 13 Nov 2026.

Classified asCompliance and riskCybersecurityIdentity and access

The NDGM homepage

Subprocessors of NDGM

NDGM declares 5 subprocessors.

From the company's own list.Read the source
SubprocessorPurposeLocationFirst seen
CloudflareFedRAMP registryDNS, DDoS protection and TLS termination at the edge — routing metadata onlyGlobal anycast network (US-headquartered)13 Nov 2026
Phala Network (enclave operator, via Venice.ai)Hosts the confidential-computing enclaves (Intel TDX) in which encrypted AI requests are decrypted and processed — data is inaccessible to the operator by hardware isolation. NDGM accepts only Phala enclavesUnited States (US-West) and India13 Nov 2026
Scaleway SAS (Iliad Group)Transactional email delivery (SMTP relay) for account, security and notification emails — recipient address and message bodyFrance (European Union)13 Nov 2026
Venice.ai, Inc. (Wyoming, USA)AI inference for platform features and the Ask NDGM website assistant — data is end-to-end encrypted to attested hardware enclaves; Venice relays ciphertext only and does not retain prompts or outputsUnited States13 Nov 2026
WhatsAppInternal notifications to the NDGM team about website enquiries, demo requests and Ask NDGM questions — website visitors only, no platform customer dataGlobal (US-headquartered)13 Nov 2026

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See NDGM's full stack

Every vendor with its source and date, and an alert when NDGM adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call