Subprocessors

1. Hosting and storage

Amazon Web Services, Inc.: cloud hosting for application servers, databases (Amazon RDS for PostgreSQL), object storage (Amazon S3) for bills and evidence packets, and encryption key management (AWS KMS). Location: United States, regions us-east-1 (primary) and us-west-2 (backup and disaster recovery).

2. Document processing

Amazon Web Services (Amazon Textract): extraction of text and tables from scanned bills and AP invoice images, processed in us-east-1. Results are returned to our systems and not retained by the vendor for model training. Customer bill data is not sent to any third-party generative model provider.

3. Monitoring and logging

Datadog, Inc.: infrastructure and application monitoring, log management and alerting, hosted in the United States (US1 site). Logs are configured to exclude document content and to mask account identifiers.

Functional Software, Inc. (Sentry): application error tracking, United States. Events carry technical context, not bill content.

4. Utility data access

Arcadia Inc.: retrieval of utility bills and usage through its utility data network where the customer chooses that connection. Location: United States.

5. Email and customer communications

Twilio Inc. (SendGrid): delivery of transactional email such as claim notices and report links, United States. HubSpot, Inc.: customer relationship management for prospects and customer contacts, United States and European Union data centers.

6. Workplace and collaboration

Google LLC (Google Workspace): company email, calendar and file storage for business correspondence with customers and utilities, United States and global regions. Slack Technologies, LLC: internal and shared-channel messaging with customers who request it, United States.

Atlassian Pty Ltd (Jira and Confluence): engineering tickets and internal documentation, with data hosted in the United States. Customer bill data is not stored in these tools.

7. Identity and security

Okta, Inc.: workforce single sign-on and multi-factor authentication, United States. Cloudflare, Inc.: DNS, content delivery and web application firewall for traceglobal.si, global network with traffic inspection in the nearest region.

8. Support and billing

Zendesk, Inc.: customer support ticketing, United States. Stripe, Inc.: card and bank payment processing for platform fees where customers choose to pay that way, United States.

9. Trace Global affiliates and personnel

Trace Global staff and contractors in Hanamkonda and Hyderabad, Telangana, India, access customer data remotely under role-based controls, logged sessions and confidentiality agreements. They are our own personnel, not a separate processor.