Snapshot 3581

Document

Subprocessor list

URL

https://trust.trustarc.com/en-US/policies/sub-processors-and-affiliates

Fetched

2026-09-22 15:14:05 UTC

HTTP status

200

Content type

text/html; charset=utf-8

Fetch mode

static

Size

750624 bytes

SHA-256 (raw)

b0a929afa4e3336b9162c30e86c8d7b9ba06a7bf9cfd31322a15dfd334e0d19a

SHA-256 (normalized text)

95a1e53c57a3164967eeb708554a5fdaa7c14121caafa3d3305ca7319cf27484

Parsed

What we read from this document, as JSON. Each entry names the snapshot it was read from.

{
  "entries": [
    {
      "kind": "subprocessor",
      "vendor": "amazon-web-services",
      "evidence_id": 3581,
      "data": {
        "name": "Amazon Web Services",
        "purposes": [
          "Hosting service for TrustArc platform",
          "Web search for AI-enabled features (Amazon Bedrock AgentCore)"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "Data Center for Cookie Consent Manager: EU-West-1 (Dublin, Ireland)",
          "Data Center for Nymity Products: Canada-Central-1 (Ontario, Canada)",
          "Data Center for Platform: US US-East-1 (Fairfax, Virginia) or EU-Central-1 (Frankfurt)",
          "US-East-1 (Fairfax, Virginia) or EU-West-1 (Dublin, Ireland)"
        ],
        "transfer_mechanisms": [
          "DPF and SCCs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "daytona",
      "evidence_id": 3581,
      "data": {
        "name": "Daytona Platforms, Inc.",
        "purposes": [
          "Secure sandbox environment for executing isolated AI-generated code and processing tasks"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "US or EU"
        ],
        "transfer_mechanisms": [
          "SCCs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "google-cloud",
      "evidence_id": 3581,
      "data": {
        "name": "Google LLC",
        "purposes": [
          "Image generation for AI-enabled features (Gemini); bot protection on consen and",
          "individual rights request forms (reCAPTCHA)"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "US or EU"
        ],
        "transfer_mechanisms": [
          "SCCs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "langchain",
      "evidence_id": 3581,
      "data": {
        "name": "LangChain Inc.",
        "purposes": [
          "Monitoring and tracing of AI-enabled feature activity within a TrustArc-controlled workspace"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "US-Central1 (Iowa, US) or EU-West4 (Netherlands)"
        ],
        "transfer_mechanisms": [
          "SCCs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "mailjet",
      "evidence_id": 3581,
      "data": {
        "name": "Mailjet SAS (a Sinch company)",
        "purposes": [
          "Nymity R&A (Research & Alerts) email delivery service"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "Frankfurt, Germany, Saint-",
          "Ghislain, Belgium"
        ],
        "transfer_mechanisms": [
          "SCCs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "microsoft",
      "evidence_id": 3581,
      "data": {
        "name": "Microsoft Corporation",
        "purposes": [
          "Cloud services supporting application logging and messaging queue capabilities for e-mail delivery for Nymity R&A"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "Canada, Central (Toronto, ON) for Nymity R&A",
          "EU Region for AI processing",
          "for EU-hosted customers and"
        ],
        "transfer_mechanisms": [
          "DPF and SCCs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "mongodb",
      "evidence_id": 3581,
      "data": {
        "name": "MongoDB Atlas",
        "purposes": [
          "Embedding generation, semantic search and reranking supporting AI-enabled features"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "US or EU"
        ],
        "transfer_mechanisms": [
          "DPF and SCCs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "openai",
      "evidence_id": 3581,
      "data": {
        "name": "OpenAI, Inc.",
        "purposes": [
          "Large language models supporting AI-enabled",
          "features"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "US.",
          "[For Customers who elect EU data residency, OpenAI-based, AI-enabled",
          "features are served from Microsoft Azure’s AI Platform within the EU (see Microsoft Corporation above)]"
        ],
        "transfer_mechanisms": [
          "SCCs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "pinecone",
      "evidence_id": 3581,
      "data": {
        "name": "Pinecone Systems, Inc.",
        "purposes": [
          "Vector database storing embeddings used by AI-",
          "enabled features"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "(Frankfurt)",
          "US East-1 (Fairfax,",
          "Virginia) or EU Central-1"
        ],
        "transfer_mechanisms": [
          "SCCs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "salesforce",
      "evidence_id": 3581,
      "data": {
        "name": "Salesforce.com",
        "purposes": [
          "Customer service, sales, and support"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "California, USA"
        ],
        "transfer_mechanisms": [
          "DPF, SCC and BCR"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "workato",
      "evidence_id": 3581,
      "data": {
        "name": "Workato, Inc.",
        "purposes": [
          "TrustArc platform integration tool"
        ],
        "sections": [
          "Sub-Processors and Affiliates"
        ],
        "locations": [
          "Virginia, US or Frankfurt, Germany"
        ],
        "transfer_mechanisms": [
          "SCC"
        ]
      }
    }
  ]
}