{"version":"2026-10-12","retentionSchedule":{"url":"https://trooth.co/retention","effective":"October 4, 2026"},"transferSafeguard":"For personal data from the EEA, the UK or Switzerland processed in a country without an adequacy decision: the European Commission's Standard Contractual Clauses, with the UK Addendum and Swiss amendments as applicable (DPA section 10).","trainingCommitment":"Trooth does not train AI models on your data, and does not sell or share it so that others can (Privacy Policy section 2).","rows":[{"id":"cloudflare-edge","processor":"Cloudflare, Inc.","purpose":"The account service at api.trooth.co and the network in front of it: edge compute, network security and form bot checks (Turnstile).","dataCategories":"Request metadata (IP address, user agent) used to route requests and enforce limits; the account service's records: sign-in, sessions, workspace membership, connector credentials and questionnaire answers a workspace saves.","region":"Global edge","retention":"Account service records for the life of the account, removed from live systems within 30 days of closing it, and from its daily export within 35 days after that; rate-limiting counters 7 days (Retention Schedule sections 2 and 3).","accessRole":"Trooth staff with production access; each workspace's records are tenant-isolated (DPA Annex II).","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors","https://trooth.co/retention"]},{"id":"cloudflare-workers-ai","processor":"Cloudflare, Inc. (Workers AI)","purpose":"AI inference for the Kyrie assistant and for drafting questionnaire answers. A production feature.","dataCategories":"A question typed to Kyrie, with passages of Trooth's own public documents; for a questionnaire draft, the question and the workspace's own evidence summaries being phrased.","region":"Global edge","retention":"Trooth stores no prompt or output from the inference. A drafted answer is kept only if the workspace saves it, in the account service, for the life of the account. Cloudflare states that Workers AI stores customer content only when a storage service is used alongside it.","accessRole":"The workspace member who asked; Trooth staff with production access.","training":"Cloudflare: Workers AI \"does not use your Customer Content to (1) train any AI models made available on Workers AI\" (developers.cloudflare.com/workers-ai/platform/privacy, read October 12, 2026). The models are open-weight models Trooth did not train.","source":["https://trooth.co/model-card","https://developers.cloudflare.com/workers-ai/platform/privacy/"]},{"id":"workos","processor":"WorkOS, Inc.","purpose":"Authentication, single sign-on (SSO) and OAuth.","dataCategories":"Name, work email, organization and the identity a single sign-on provider asserts.","region":"United States","retention":"For the life of the account; a sign-in session ends when you sign out, when it is revoked, or 30 days after you signed in (Privacy Policy).","accessRole":"The account holder and the workspace's administrators; Trooth staff with production access.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors","https://trooth.co/privacy"]},{"id":"neon","processor":"Neon, Inc.","purpose":"The managed PostgreSQL database for this website's records.","dataCategories":"Company profiles, lists, reviews, sign-offs, buyer and document requests, notification routes, Trust Center access requests and copies of cookie choices.","region":"United States","retention":"Per row of the Retention Schedule section 2: working data for the life of the account plus 30 days; derived state 24 months; access records 24 months; cookie receipts 24 months.","accessRole":"The workspace that owns each record; Trooth staff with production access.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors","https://trooth.co/retention"]},{"id":"aws","processor":"Amazon Web Services, Inc.","purpose":"The cloud infrastructure beneath the managed database, through Neon.","dataCategories":"The same records as the Neon row, at rest.","region":"United States","retention":"As the Neon row. Trooth keeps no storage or keys with AWS directly.","accessRole":"Through Neon only.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors"]},{"id":"github","processor":"GitHub, Inc.","purpose":"Source control, continuous integration, and storage of the nightly database backup.","dataCategories":"The nightly encrypted dump of this website's records.","region":"United States","retention":"Each nightly dump is kept 30 days (Retention Schedule section 3).","accessRole":"Trooth staff with repository access.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors","https://trooth.co/retention"]},{"id":"vercel","processor":"Vercel, Inc.","purpose":"Web hosting, and web analytics where the Cookie Policy allows it.","dataCategories":"Request metadata; analytics events only where your cookie choice allows them.","region":"Multi-region edge","retention":"Logs are held by the provider under its own retention period, which the Retention Schedule does not cover (section 3).","accessRole":"Trooth staff with production access.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors","https://trooth.co/cookies"]},{"id":"sentry","processor":"Sentry (Functional Software, Inc.)","purpose":"Application error tracking.","dataCategories":"Error reports, which can carry request metadata.","region":"United States","retention":"Under the provider's own retention period (Retention Schedule section 3).","accessRole":"Trooth staff with production access.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors"]},{"id":"resend","processor":"Resend, Inc.","purpose":"Transactional email.","dataCategories":"Recipient address and the content of the message sent.","region":"United States","retention":"Under the provider's own retention period (Retention Schedule section 3).","accessRole":"Trooth staff with production access.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors"]},{"id":"google","processor":"Google LLC","purpose":"Business email and document storage.","dataCategories":"Correspondence with Trooth and the documents exchanged in it.","region":"Multi-region","retention":"Under the provider's own retention period (Retention Schedule section 3).","accessRole":"Trooth staff party to the correspondence.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors"]},{"id":"nango","processor":"Nango","purpose":"OAuth authorization broker, only when a customer connects an integration.","dataCategories":"The OAuth credential for the tool the customer connects.","region":"United States","retention":"The credential leaves live systems within 24 hours of disconnecting, and backups within 36 days of disconnecting (Retention Schedule section 2).","accessRole":"The connecting workspace; Trooth staff with production access.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors","https://trooth.co/retention"]},{"id":"uptimerobot","processor":"UptimeRobot","purpose":"Availability monitoring.","dataCategories":"Requests to Trooth's public endpoints. No customer personal data.","region":"Multi-region","retention":"Under the provider's own retention period (Retention Schedule section 3).","accessRole":"Trooth staff.","training":"No AI processing in this flow.","source":["https://trooth.co/subprocessors"]},{"id":"anthropic","processor":"Anthropic, PBC","purpose":"Internal-use generative AI for the productivity of Trooth's own staff. Not part of any product feature: no customer-facing feature sends customer data to it.","dataCategories":"Only what a Trooth staff member includes in their own work.","region":"United States","retention":"Under Anthropic's commercial terms; outside the Retention Schedule.","accessRole":"Trooth staff.","training":"Anthropic's commercial terms: \"Anthropic may not train models on Customer Content from Services\" (anthropic.com/legal/commercial-terms, read October 12, 2026).","source":["https://trooth.co/model-card","https://trooth.co/subprocessors","https://www.anthropic.com/legal/commercial-terms"]}]}