To provide Tracecanon, we engage a small set of vetted service providers (“sub-processors”) that may process personal data contained in Customer Content on our behalf. Each is bound by a data-processing agreement with obligations no less protective than our Data Processing Addendum and processes data only to provide its service to us. This page lists them by role; provider names are current defaults and may change on notice.
1. Current sub-processors
| Role | Provider | Purpose | Data | Location |
|---|---|---|---|---|
| Hosting & compute | Managed cloud infrastructure | Runs the application, database, and background workers. | All service data at rest and in processing. | EU / US |
| Object storage | S3-compatible object storage | Stores uploaded recordings, documents, and exports. | Customer Content (media, documents, exports). | EU / US |
| Cloud AI gateway (speech-to-text, language models & embeddings) | OpenRouter, Inc. | Routes transcription, semantic indexing, document/visual claim extraction, cited answers, and analysis only to operator-approved zero-retention endpoints. | Complete normalized audio for transcription; transcript segments and document chunks for embeddings, extraction, and chronology; relevant visual evidence pages with local OCR text; relevant excerpts, structured claim pairs, and user queries for analysis. | EU endpoint when regional processing is enabled |
| Email delivery | Transactional email provider (Resend / SMTP) | Sends account, invitation, and service emails. | Recipient email address and message content. | EU / US |
| Payments | Stripe, Inc. | Processes subscription payments and invoicing. | Billing contact and payment details (card data never reaches us). | US |
| Error monitoring (optional) | Error-monitoring provider, when enabled by the operator | Captures anonymized diagnostics to fix faults. | Technical error data; no Customer Content by design. | EU / US |
2. Change notification
We will give customers reasonable prior notice before adding or replacing a sub-processor that processes Customer Content, so you can object on reasonable data-protection grounds as described in the Data Processing Addendum. To be notified of changes, or to request the current signed list, contact privacy@tracecanon.com.
Operated by: Nimavera Inc. (in formation). A postal address for service of notice is available on request at legal@tracecanon.com.
Questions about this document: legal@tracecanon.com