Trust evidence
Subprocessors
Published subprocessor list for GDPR and supply chain diligence questionnaires.
- Download trust pack artifacts
- Reproduce audit export in trial
- Honest Shipped/Gap tables
ZIPtrust pack available
Download trust materialsSubprocessors
Last updated 2026-08-11
Subprocessors
Visual summary before evidence tables below.
Vendor origin
Trustholm (European Union (EEA) founder-led) operates globally via Trustholm (Australia). European founder-led vendor. EU/EEA contracting entity and VAT details are confirmed during enterprise onboarding. EU procurement: security@trustholm.com.
Data plane regions: Australia (production launch); European Union (pilot and enterprise deployments). See EU digital sovereignty resource for residency evaluation.
Subprocessors
This list supports vendor security questionnaires. Production deployments may add infrastructure subprocessors documented in your order form.
| Subprocessor | Purpose | Location | Data |
|---|---|---|---|
| Vercel | Marketing site hosting (www.trustholm.com) and signup API routes | United States (Vercel edge/network) | Trial form submissions proxied server-side; no tenant production data |
| HubSpot | CRM for early access, report pack, presales, and newsletter forms | United States (HubSpot) | Work email, name, phone, address, company, product interest, ICP notes, UTM attribution |
| Cloudflare Turnstile | Bot protection on trial signup forms (optional) | Cloudflare global network | Browser challenge metadata; no tenant production data |
| Cloud infrastructure provider (AU region) | Application hosting, PostgreSQL, Redis (default launch region) | Australia (primary launch region) | Tenant metadata, audit logs, script content at rest |
| Cloud infrastructure provider (EU region) | Application hosting, PostgreSQL, Redis (EU pilot and enterprise tenants) | European Union (sovereign cloud partners e.g. OVHCloud, Scaleway, Hetzner) | Tenant metadata, audit logs, script content at rest for EU home-region tenants |
| Email delivery (SMTP) | Transactional email (confirmations, trial ack) | Configured per deployment | Recipient email, message content |
| OpenStreetMap / Photon | Address autocomplete on trial early-access forms | Photon public API (Komoot); OpenStreetMap geodata | Address search queries typed on trial forms; no tenant production data |
| Google Tag Manager & Google Analytics | Tag management and website analytics (Consent Mode on www.trustholm.com; storage off until Accept) | United States (Google) | Page views, events-no tenant production data |
DPA requests: security@trustholm.com. See also trust downloads.