Last updated 2026-08-11
Visual summary before evidence tables below.
Trust evidence
Published subprocessor list for GDPR and supply chain diligence questionnaires.
Trustholm is a founder-led software business based in Brisbane, Australia. The contracting party is confirmed in writing before any paid agreement. EU procurement: security@trustholm.com.
Data plane regions: Australia first (planned); European Union by enterprise arrangement. See EU digital sovereignty resource for residency evaluation.
This list supports vendor security questionnaires. Production deployments may add infrastructure subprocessors documented in your order form.
| Subprocessor | Purpose | Location | Data |
|---|---|---|---|
| Cloudflare | Marketing site hosting (www.trustholm.com) and trial signup API routes | Cloudflare global network | Trial form submissions; no tenant production data |
| HubSpot | CRM for early access, report pack, presales, and newsletter forms | United States (HubSpot) | Work email, name, phone, address, company, product interest, ICP notes, UTM attribution |
| Cloudflare Turnstile | Bot protection on trial signup forms (optional) | Cloudflare global network | Browser challenge metadata; no tenant production data |
| Cloud infrastructure provider (AU region) | Application hosting, PostgreSQL, Redis (planned first region) | Australia (planned first region; not yet in production) | Tenant metadata, audit logs, script content at rest |
| Cloud infrastructure provider (EU region) | Application hosting, PostgreSQL, Redis (EU, by enterprise arrangement; not yet in use) | European Union (provider chosen at contract) | Tenant metadata, audit logs, script content at rest for EU home-region tenants |
| Email delivery (SMTP) | Transactional email (confirmations, trial ack) | Configured per deployment | Recipient email, message content |
| OpenStreetMap / Photon | Address autocomplete on trial early-access forms | Photon public API (Komoot); OpenStreetMap geodata | Address search queries typed on trial forms; no tenant production data |
| Google Tag Manager & Google Analytics | Tag management and website analytics (Consent Mode on www.trustholm.com; storage off until Accept) | United States (Google) | Page views, events-no tenant production data |
DPA requests: security@trustholm.com. See also trust downloads.