Legal
Sub-processors
Last updated May 18, 2026
What is a sub-processor?
A sub-processor is a third party we engage to help operate the TrustekAI platform. Each sub-processor is bound by contractual obligations equivalent to those in our Data Processing Addendum.
Current sub-processors
| Vendor | Purpose | Hosting region(s) | Data categories |
|---|---|---|---|
| Railway | Application hosting (api-gateway, auth, sentinel, web) | United States, Europe, Singapore (region selectable per customer) | All Customer Data |
| Neon / Supabase (PostgreSQL) | Primary managed database | United States, Europe, Australia (region selectable per customer) | All Customer Data |
| Upstash (Redis) | Job queue (BullMQ), rate-limit store | United States, Europe | Ephemeral job payloads, no Customer Data persisted |
| Anthropic | LLM inference for AI features (chat, policy generation, judges) | United States | Operator-initiated request bodies only |
| OpenAI | Optional LLM inference (alternative to Anthropic) | United States | Operator-initiated request bodies only |
| Postmark / SendGrid | Transactional email (invitations, magic-link sign-in, scheduled report delivery) | United States | Recipient email addresses, message contents |
| Sentry | Error monitoring and stack trace collection | United States, Europe | Application errors; PII filtered via Sentry data scrubbing |
| Cloudflare | DNS, CDN, DDoS protection, WAF | Global edge | Request metadata |
Notification of changes
We give at least 30 days' written notice before adding a new sub-processor or materially expanding the scope of an existing one. Customers may object on reasonable data-protection grounds during the notice period. If we cannot accommodate an objection, the customer may terminate the affected portion of the Service without penalty.
Subscribing to updates
To receive sub-processor change notices by email, write to privacy@trustekai.com with the subject 'Subscribe — Sub-processor List'. Enterprise customers can also receive notices via Slack or a webhook of their choice.
Questions about this document can be sent to privacy@trustekai.com.