Sub-processors
Published because a broker's compliance officer will ask for it, and because the Data Processing Addendum commits us to keeping it current.
01How to read this page
A sub-processor is a third party we engage that may process personal data on a customer's behalf in the course of delivering the Platform. Each is engaged under written terms no less protective than our own Data Processing Addendum, and we remain liable for their performance.
The categories below describe what is engaged and for what purpose. The named providers in force for a given customer, and the regions their data is held in, are confirmed in that customer's order form, because residency is configurable per entity.
02Categories in use
Cloud infrastructure and hosting: compute, storage and networking for the Platform, in the region agreed with the customer.
Database and managed data services: the persistence layer for Atlas, in the same region.
Large language model providers: natural language understanding and drafting, engaged on zero retention or shortest available retention terms, and contractually prohibited from training foundation models on customer data.
Error monitoring and observability: operational telemetry, configured to avoid personal data in payloads where technically possible.
Transactional email and notification delivery: approval notices and operational alerts to named users at the customer.
Business systems: the tools we use to run our own company, such as correspondence and contract management, which process the business contact details of customer personnel rather than end client data.
03What is deliberately not in the list
No advertising network, no data broker, no analytics provider that builds cross site profiles, and no third party that receives end client personal data for its own purposes.
We do not use a sub-processor to hold or move client money, because the Platform never holds or moves client money.
04Changes and objection
We give customers at least thirty days notice before adding or replacing a sub-processor, to the administrative contact on the account.
A customer may object on reasonable data protection grounds within that period. We will work in good faith to provide an alternative, and where none is available the customer may terminate the affected part of the service without penalty for the remainder of the term.
To be added to the notification list, or to request the current named list under NDA, contact sales@brokeros.tech.
TRUDO TECHNOLOGIES LTD. Contact sales@brokeros.tech.