Trusted Codes

Sub-processors

Current as of 2026-07-30

These are the third parties that process data on behalf of Trusted Codes. The list carries its own date, because it changes when a supplier changes rather than when a contract does.

It is also Annex 2 of the Data Processing Agreement, and Section 12 of the Privacy Policy. All three are rendered from one source, so they cannot disagree.

Core service

Engaged for every customer of the hosted service.

ProviderPurposeLocationData sharedTransfer basis
SupabaseDatabase, authentication, server functions and file storageEuropean Union (Stockholm); operator established in the United StatesAll account, verification and billing data held by the serviceStandard Contractual Clauses (2021/914)
VercelHosting of the web portals and the public websiteUnited States, with European edge regionsRequest metadata: address of origin, user agent, requested pathStandard Contractual Clauses (2021/914)
InfisicalCustody of the keys that protect data at restEuropean UnionEncryption keys only — no personal dataInside the EEA
StripePayment processing and subscription billingIreland and the United StatesBilling name and address, tax identification number, subscription state. Card data never reaches Trusted Codes.Standard Contractual Clauses (2021/914)
ResendDelivery of transactional electronic mailUnited StatesElectronic mail address and message content, decrypted for the moment of sendingStandard Contractual Clauses (2021/914)
ExpoRelay of push notifications to the Apple and Google delivery servicesUnited StatesPush token and notification contentStandard Contractual Clauses (2021/914)
MaxMindFraud scoring and approximate location at sign-inUnited StatesAddress of origin, electronic mail address, device signalsStandard Contractual Clauses (2021/914)
Google (Gemini)Generating the answer of the in-app help assistantUnited StatesThe question asked and the help articles retrieved for itStandard Contractual Clauses (2021/914)
OpenAITurning a help question into a search vector, and indexing the help articlesUnited StatesThe question asked, and the text of the published help articlesStandard Contractual Clauses (2021/914)
MetabaseAnalytics dashboards inside the administration consoleInfrastructure operated by Trusted CodesAggregate figures queried from the service databaseOperated by Trusted Codes

Optional and user-chosen

Engaged only where the end user chooses the feature, or where the component is configured.

ProviderPurposeLocationData sharedTransfer basis
AppleSign-in, where the end user chooses itUnited StatesName and electronic mail address, or the relay address Apple issues insteadStandard Contractual Clauses (2021/914)
GoogleSign-in, where the end user chooses itUnited StatesName and electronic mail addressStandard Contractual Clauses (2021/914)
SentryError monitoring in the mobile applicationEuropean Union (German region)Error reports: stack trace, application version, device modelInside the EEA

Public website only

These handle visitors to trusted.codes, not users of the service.

ProviderPurposeLocationData sharedTransfer basis
Plausible AnalyticsVisitor statistics for the public websiteInfrastructure operated by Trusted CodesPage requested and referrer, with no cookie and no identifierOperated by Trusted Codes
Google (Sheets and Apps Script)Receiving the website contact form and the waiting list formUnited StatesWhat the sender typed into the formStandard Contractual Clauses (2021/914)
SentryError monitoring for the website, where configuredEuropean Union (German region)Error reports: stack trace, browser, pageInside the EEA

A new sub-processor is announced at least 30 days before it begins processing, by electronic mail to the administrative contact of each business customer and by an update to this page.