Transparency
Subprocessors
Last updated: February 2026
TrustSignal uses the following third-party subprocessors to deliver the Service. Each subprocessor has been evaluated for its security practices and data handling capabilities. We will update this page when subprocessors are added or removed, and notify customers on paid plans via email of material changes.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Render | Cloud hosting and infrastructure | Application data, scan results, account information | United States |
| PostgreSQL (Render-managed) | Database storage | All persistent application data including user accounts, scan results, signals, and team data | United States |
| Stripe | Payment processing and subscription billing | Billing information, payment method tokens, subscription status | United States |
| Anthropic | AI-powered analysis of publicly available content | Publicly available website text for trust signal analysis (no customer PII) | United States |
| SMTP Provider | Transactional email delivery (verification, alerts, reports) | Email addresses, notification content | United States |
Data Residency
All customer data is stored and processed within the United States. If you have specific data residency requirements, please contact us at support@trustsignal.tech.
Change Notification
We provide at least 30 days advance notice before engaging a new subprocessor that processes customer data. Customers on paid plans who object to a new subprocessor may contact us to discuss alternatives or terminate their subscription without penalty.
Questions
For questions about our subprocessors or data processing practices, contact us at support@trustsignal.tech.