Third parties that may process customer data while providing the traceunified Service. Material changes are noticed at least 30 days in advance under the Data Processing Addendum. AI providers used with a customer-supplied key (BYOK) are not traceunified subprocessors.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Hosting, database, storage, secrets, monitoring (Aurora PostgreSQL, ECS Fargate, Secrets Manager, ECR, CloudWatch) | All application data at rest and in processing | us-east-1 (USA) |
| Cloudflare | DNS and edge network for application domains | Network metadata (requests, IPs) | Global edge |
| Zoho Mail (Zoho Corporation) | Transactional email (password reset, invitations, notifications) where an organisation has not configured its own transport | Recipient email address + message content | USA (US data centre) |
Questions: privacy@traceunified.com. Full DPA: /legal/dpa.