Companies / Nucleus Security / Subprocessors
Nucleus provides a platform for vulnerability and exposure management that unifies asset data, prioritizes vulnerabilities with threat intelligence, and automates remediation workflows. It serves security teams including federal government agencies, state and local government and education, and MSSPs.
Summarized from its homepage on 5 Nov 2026.
Subprocessors of Nucleus Security
Nucleus Security declares 14 subprocessors.
| Subprocessor | Purpose |
|---|---|
| Hosting for customer instances and their backups, and AI model hosting via AWS Bedrock. Customer data remains within selected AWS region. | |
| Customer service. | |
| Customer notifications about service health. | |
| Relays commercial platform emails (not used for NucleusGov). | |
| Content distribution, application security/abuse prevention, and DNS service provider. | |
| Trust portal with customer access and notifications. | |
| Optional hosting for customer instances and their backups. Customer data remains within selected GCP region. | |
| Used by Nucleus employees for customer communications via email, Teams, and related document collaboration. Employees may also use Copilot AI for work assistance. | |
| Optional hosting for customer instances and their backups. Customer data remains within selected Azure region. | |
| Application analytics provider (not used for NucleusGov). |
4 more subprocessors
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inCertifications
| Standard | What the source says | Checked |
|---|---|---|
| FedRAMPListed in registry | Nucleus for Government (NucleusGov), ModerateListed as FedRAMP Authorized in the official FedRAMP Marketplace data. | 8 Nov 2026Source |
We last read its homepage on 12 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Nucleus Security lacks it.
Recent changes
| Date | Change |
|---|---|
| 12 Nov 2026 | changed Pendo |
| 12 Nov 2026 | removed Vitally |
| 12 Nov 2026 | removed Salesforce |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Nucleus Security's full stack
Every vendor with its source and date, and an alert when Nucleus Security adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call