TrustArc
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | not found | 0 / 5 |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 72 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For TrustArc's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/trustarc"><img src="https://thirdpartyindex.com/badge/trustarc.svg" alt="TrustArc transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/trustarc)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center | snapshot | ||
| Subprocessor list | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services | Hosting service for TrustArc platform; Web search for AI-enabled features (Amazon Bedrock AgentCore) | Data Center for Cookie Consent Manager: EU-West-1 (Dublin, Ireland); Data Center for Nymity Products: Canada-Central-1 (Ontario, Canada); Data Center for Platform: US US-East-1 (Fairfax, Virginia) or EU-Central-1 (Frankfurt); US-East-1 (Fairfax, Virginia) or EU-West-1 (Dublin, Ireland) (DPF and SCCs) | |
| Daytona Platforms, Inc. | Secure sandbox environment for executing isolated AI-generated code and processing tasks | US or EU (SCCs) | |
| Google LLC | Image generation for AI-enabled features (Gemini); bot protection on consen and; individual rights request forms (reCAPTCHA) | US or EU (SCCs) | |
| LangChain Inc. | Monitoring and tracing of AI-enabled feature activity within a TrustArc-controlled workspace | US-Central1 (Iowa, US) or EU-West4 (Netherlands) (SCCs) | |
| Mailjet SAS (a Sinch company) | Nymity R&A (Research & Alerts) email delivery service | Frankfurt, Germany, Saint-; Ghislain, Belgium (SCCs) | |
| Microsoft Corporation | Cloud services supporting application logging and messaging queue capabilities for e-mail delivery for Nymity R&A | Canada, Central (Toronto, ON) for Nymity R&A; EU Region for AI processing; for EU-hosted customers and (DPF and SCCs) | |
| MongoDB Atlas | Embedding generation, semantic search and reranking supporting AI-enabled features | US or EU (DPF and SCCs) | |
| OpenAI, Inc. | Large language models supporting AI-enabled; features | US.; [For Customers who elect EU data residency, OpenAI-based, AI-enabled; features are served from Microsoft Azure’s AI Platform within the EU (see Microsoft Corporation above)] (SCCs) | |
| Pinecone Systems, Inc. | Vector database storing embeddings used by AI-; enabled features | (Frankfurt); US East-1 (Fairfax,; Virginia) or EU Central-1 (SCCs) | |
| Salesforce.com | Customer service, sales, and support | California, USA (DPF, SCC and BCR) | |
| Workato, Inc. | TrustArc platform integration tool | Virginia, US or Frankfurt, Germany (SCC) |
Listed as a subprocessor by (2)
Purposes as each company states them.
Changes
None since tracking began.