Sub-Processors

TrustArc utilizes the following Sub-processors for the provision and operation of its Solutions and processing of Customer Data, including any associated Personal Information therein.

Data Hosting Location

Entity Name

Amazon Web Services

Location

Data Center for Platform: US East-1 (N. Virginia, USA) or EU Central-1 (Frankfurt, Germany)

Purpose

Hosting service for TrustArc platform

Transfer Mechanism

DPF and SCCs

Sub-Processor Contact

https://aws.amazon.com/contact-us/

Location

Data Center for Cookie Consent Manager: EU West-1 (Dublin, Ireland) or AP South-1 (Mumbai, India)

Location

Data Center for Nymity Products: Canada Central-1 (Canada)

Third Party Sub-processors

Entity Name

Amazon Web Services

Location

US-East-1 (Fairfax, Virginia) or EU-West-1 (Dublin, Ireland)

Purpose

Web search for AI-enabled features (Amazon Bedrock AgentCore)

Transfer Mechanism

DPF and SCCs

Sub-Processor Contact

https://aws.amazon.com/contact-us/

Entity Name

Daytona Platforms, Inc.

Location

US or EU

Purpose

Secure sandbox environment for executing isolated AI-generated code and processing tasks

Transfer Mechanism

SCCs

Sub-Processor Contact

https://www.daytona.io/contact

Entity Name

Google LLC

Location

US or EU

Purpose

Image generation for AI-enabled features (Gemini); bot protection on consent and individual rights request forms (reCAPTCHA)

Transfer Mechanism

SCCs

Sub-Processor Contact

https://cloud.google.com/contact

Entity Name

LangChain Inc.

Location

US-Central1 (Iowa, US) or EU-West4 (Netherlands)

Purpose

Monitoring and tracing of AI-enabled feature activity within a TrustArc-controlled workspace

Transfer Mechanism

SCCs

Sub-Processor Contact

https://support.langchain.com

Entity Name

Mailjet SAS (a Sinch company)

Location

Frankfurt, Germany, Saint- Ghislain, Belgium


Purpose

Nymity R&A (Research & Alerts) email delivery service

Transfer Mechanism

SCCs

Sub-Processor Contact

https://www.mailjet.com/contact/support/

Entity Name

Microsoft Corporation

Location

US East (Virginia, US) or EU Germany West Central (Frankfurt, Germany) and Canada, Central (Toronto, ON) for Nymity R&A


Purpose

Microsoft Azure AI Platform hosting large language model instances for AI-enabled features; Cloud services supporting application logging and messaging queue capabilities for e-mail delivery for Nymity R&A

Transfer Mechanism

DPF and SCCs

Sub-Processor Contact

https://support.microsoft.com/en-us/contactus

Entity Name

MongoDB Atlas

Location

US or EU

Purpose

Embedding generation, semantic search and reranking supporting AI-enabled features

Transfer Mechanism

DPF and SCCs

Sub-Processor Contact

https://www.mongodb.com/company/contact

Entity Name

Pinecone Systems, Inc.

Location

US East-1 (Fairfax, Virginia) or EU Central-1 (Frankfurt)

Purpose

Vector database storing embeddings used by AI- enabled features

Transfer Mechanism

SCCs

Sub-Processor Contact

https://www.pinecone.io/contact/

Entity Name

Salesforce.com

Location

California, USA

Purpose

Customer service, sales, and support

Transfer Mechanism

DPF, SCCs, and BCR

Sub-Processor Contact

https://www.salesforce.com/company/contact-us/

Entity Name

Workato, Inc.

Location

Virginia, USA

Frankfurt, Germany

Purpose

TrustArc platform integration tool

Transfer Mechanism

SCC

Sub-Processor Contact

https://support.workato.com/en/support/home

TrustArc Affiliates

Entity Name

TrustArc Inc.

Location

United States, India

Entity Name

TrustArc Canada Inc.

Location

Canada

Entity Name

Truste Europe Ltd

Location

United Kingdom, Spain

Entity Name

Truste Web Services Technologies, Inc.

Location

Philippines, India