Trust Centre · NureWorker

Who we are

Operated by Nure Group Limited (England & Wales).
Data controller: Nure Group Limited.
ICO registration: pending.
Brand wall: NureWorker is structurally separate from NureComp (sister product serving employers). Different brand, account, database and infrastructure.

Where your data lives

Hosting: Hetzner Cloud, Falkenstein DC (EU).
Database: Postgres on the same Hetzner project, encrypted at rest, daily snapshots.
Object storage: Hetzner Object Storage (EU-Central) for documents.
Transit: TLS 1.3 via Let’s Encrypt; HSTS preload-eligible.

Who we share with (sub-processors)

Stripe — payments. UK / US.
Resend — transactional email. US.
Anthropic — the AI we use to draft answers. US.
Cloudflare — DNS, WAF. US.
Sentry — error tracking (PII-scrubbed). US.
Grafana Cloud — metrics. EU / UK.
Better Stack — uptime monitoring. EU.

Every sub-processor has a signed DPA. Full list with transfer mechanisms appears here as we complete onboarding.

How the free and paid products differ

The free product (homepage search, Rights Check, library, tools) runs on pre-computed content. AI is used when we build the corpus, not when you ask. Per query: no live AI call. The paid product (Premium, £5 one-off AI consult, paid services) uses live AI, with every paid answer grounded in a solicitor-reviewed article and checked against the source before you see it. See methodology for the detail.

What we never do

We do not sell your data.
We do not share your questions or documents with your employer.
We do not present AI-only outputs as legal advice — every paid document is reviewed by a panel UK solicitor before delivery.
We do not store payment-card details. Stripe holds them; we hold only the customer reference.

Contact