Subprocessors
Last updated: April 2026
This page lists subprocessors used by Triqai to provide the Services. We update this page when subprocessors materially change.
For enterprise customers, subprocessor governance and notification terms are described in our DPA.
1. How We Use Subprocessors
Triqai engages subprocessors for specific functions such as infrastructure, hosting, databases, observability, billing, email delivery, anti-abuse, analytics, and enrichment support services.
| Subprocessor | Purpose | Primary Processing Location(s) | Transfer Safeguards |
|---|---|---|---|
| Cloudflare | Core API runtime/infrastructure, edge security, and analytics engine support | EU and global (service-dependent) | SCCs or equivalent safeguards where required |
| Vercel | Marketing/dashboard web hosting, edge delivery, and scheduled web cron execution | EU/US/global (service-dependent) | SCCs or equivalent safeguards where required |
| Neon | Managed PostgreSQL database infrastructure for application data storage | EU/US/global (service-dependent) | SCCs or equivalent safeguards where required |
| Stripe | Payments, subscription management, invoicing, metered usage billing | EU/US/global (service-dependent) | SCCs or equivalent safeguards where required |
| Resend | Transactional/service email delivery | US (service-dependent) | SCCs or equivalent safeguards where required |
| Upstash | Rate limiting and security-related key-value operations | EU/US/global (service-dependent) | SCCs or equivalent safeguards where required |
| Sentry | Error monitoring and incident diagnostics | EU/US/global (service-dependent) | SCCs or equivalent safeguards where required |
| Umami Cloud | Marketing-site analytics | EU/US/global (service-dependent) | SCCs or equivalent safeguards where required |
| Cloudflare Turnstile | Bot detection and abuse prevention on public forms/endpoints | EU and global (service-dependent) | SCCs or equivalent safeguards where required |
| Serper | Search enrichment support for merchant/location analysis | US (service-dependent) | SCCs or equivalent safeguards where required |
| UK Companies House API | Public registry lookups for UK company context enrichment | United Kingdom | Not a transfer mechanism provider; public registry data source usage |
| Groq / Cerebras / SambaNova / Together / Nebius | OpenAI-compatible AI inference providers used for enrichment pipelines | US and global (provider-dependent) | SCCs or equivalent safeguards where required |
2. Subprocessor Change Notifications
Material subprocessor additions or replacements are notified under the process defined in the DPA, including notice period and objection handling for customers with applicable contractual rights.
Notification is typically provided through account-owner email and/or designated contractual contacts, with dashboard or website updates as supplemental notice channels.
3. Other Third-Party Recipients
Some integrations (for example optional Google or GitHub social login selected by the user) may involve third parties acting as independent controllers for their own processing activities under their own privacy notices.
4. Questions
For subprocessor questions, contact support@triqai.com.