Trust evidence
Subprocessors
Published subprocessor list for GDPR and supply chain diligence questionnaires.
- Download trust pack artifacts
- Reproduce audit export in trial
- Honest Shipped/Gap tables
ZIPtrust pack available
Download trust materialsSubprocessors
Last updated 2026-06-29
Subprocessors
Visual summary before evidence tables below.
Vendor origin
Trustholm (European Union (EEA) founder-led) operates globally via Trustholm Pty Ltd (Australia). European founder-led vendor. EU/EEA contracting entity and VAT details are confirmed during enterprise onboarding. EU procurement: security@trustholm.com.
Data plane regions: Australia (production launch); European Union (pilot and enterprise deployments). See EU digital sovereignty resource for residency evaluation.
Subprocessors
This list supports vendor security questionnaires. Production deployments may add infrastructure subprocessors documented in your order form.
| Subprocessor | Purpose | Location | Data |
|---|---|---|---|
| Vercel | Marketing site hosting (www.trustholm.com) and signup API routes | United States (Vercel edge/network) | Trial form submissions proxied server-side; no tenant production data |
| Intuit Mailchimp | Early-access list and marketing email (when SIGNUP_PROVIDER=mailchimp) | United States (Mailchimp) | Work email, company name, ICP qualification fields, UTM attribution |
| Cloudflare Turnstile | Bot protection on trial signup forms (optional) | Cloudflare global network | Browser challenge metadata; no tenant production data |
| Cloud infrastructure provider (AU region) | Application hosting, PostgreSQL, Redis (default launch region) | Australia (primary launch region) | Tenant metadata, audit logs, script content at rest |
| Cloud infrastructure provider (EU region) | Application hosting, PostgreSQL, Redis (EU pilot and enterprise tenants) | European Union (sovereign cloud partners e.g. OVHCloud, Scaleway, Hetzner) | Tenant metadata, audit logs, script content at rest for EU home-region tenants |
| Email delivery (SMTP) | Transactional email (confirmations, trial ack) | Configured per deployment | Recipient email, message content |
| Google Analytics | Website analytics (consent-gated on www.trustholm.com) | United States (Google) | Page views, events-no tenant production data |
DPA requests: security@trustholm.com. See also trust downloads.