Sub-processors
Last updated: June 23, 2026
This document lists TraceRoster's current sub-processors in plain language. It must be reviewed and approved by qualified legal counsel before being relied upon, and it does not constitute legal advice.
A sub-processor is a third-party service provider that processes personal data on our behalf to help us operate the Service. We rely on a small set of trusted providers for infrastructure, payments, email, AI processing, and monitoring so that we can deliver TraceRoster reliably and securely. Before engaging a sub-processor, we conduct due diligence and require appropriate data-protection commitments. This page explains who those providers are and what they do. For more on how we handle personal information generally, see our Privacy Policy.
1. Current sub-processors
We currently use the following sub-processors. For each, we describe the purpose of the processing and the type of data involved.
- Paddle— Payment processing and billing. Processes purchase and billing details. Payment card data is handled by Paddle and is not stored by TraceRoster.
- OpenAI— AI processing of submitted content, such as resume text, to power features like information extraction and search. Processes the content you submit for these features.
- Resend— Transactional email delivery, such as verification messages, notifications, and data-export links. Processes recipient email addresses and message content.
- PostHog— Product analytics. Processes usage and device information to help us understand and improve the product.
- Sentry— Error monitoring and diagnostics. Processes technical and diagnostic data, which may incidentally include limited personal data within error reports.
- S3-compatible cloud object storage— Storage of uploaded files such as resumes and profile images. Processes the files you upload to the Service.
2. International transfers
Some of our sub-processors are located in, or process data in, other countries, including the United States. Where personal data is transferred across borders, we rely on appropriate safeguards to protect that data. We also enter into data-protection terms with our sub-processors and conduct due diligence on their security and privacy practices.
3. Changes and notice
We may update this list as our service providers change, for example when we add, replace, or remove a sub-processor. If we make a material change to our use of sub-processors, we will provide notice through the Service or by other appropriate means. We encourage you to review this page periodically for the most current information.
4. Contact
Questions about our sub-processors can be sent to privacy@traceroster.com. See also our Privacy Policy.