To provide the hosted Trusvo service we use a small number of subprocessors. Each processes only the data needed for its function, under a data-processing agreement with terms no less protective than our DPA. Self-hosted deployments use none of these for hosting — your content stays in your own infrastructure.
1. Current subprocessors
Hostinger International Ltd. — cloud hosting and database
Runs the application, the background workers and the PostgreSQL database on a server in a European Union data centre. Data: account data, Customer Content and the Evidence Graph, in transit and at rest.
Cloudflare, Inc. — object storage (R2) and backups
Once object storage is switched on (until then, files stay on the hosting server above): stores uploaded files, generated artifacts (trust packs, exports) and the encrypted offsite database backups, in an EU-jurisdiction bucket. Data: Customer Content and Generated Materials, secret-redacted before storage; backups are encrypted before they leave the server. Transfers: a US company; Standard Contractual Clauses.
OpenRouter, Inc. — LLM inference (operator-configured credentials)
Routes model requests that generate evidence items and draft answers from the text you submit, only to model providers that do not collect or train on inputs (data-collection deny). Data: redacted evidence and questionnaire text. Terms: zero-retention / no-training required where available; disabled entirely without a configured key. Transfers: a US company; Standard Contractual Clauses.
Resend, Inc. — email delivery
Sends transactional email — password resets, two-factor, review notifications, buyer and deal notifications, digests. Data: recipient email address and message content. Transfers: a US company; Standard Contractual Clauses.
Stripe, Inc. and Stripe Payments Europe, Ltd. — payments
Subscription billing, tax calculation and payment processing. Data: billing contact, address, VAT number and payment details; we never store full card numbers. Transfers: Standard Contractual Clauses.
Monitoring and error reporting — no third party
Errors and operational health are recorded by the Service itself and read by Nimavera's own monitoring; no external error-tracking or analytics vendor receives your data.
2. Data minimization
Secrets are redacted before storage and before any content is sent to a model. In config-only mode, application source code is excluded from ingestion. We share with each subprocessor only what its function requires, and machine-readable surfaces never expose more than the human page.
3. Changes and notice
We will update this list before adding or replacing a subprocessor that processes personal data and — for customers who ask to be notified — give reasonable advance notice so you can object. If you object on reasonable data-protection grounds, we will work with you in good faith or, failing a resolution, you may terminate the affected service.
4. Contact
To subscribe to subprocessor-change notices or ask questions: privacy@trusvo.com.
Pre-launch template texts describing how Trusvo actually works. Not legal advice — have counsel review before relying on them.