Sub-processor List

TrustPin is operated by Capa7 LLC, a Wyoming limited liability company (“Capa7”, “TrustPin”, “we”, “us”, or “our”).

This page identifies the principal third-party service providers that may process personal data in connection with TrustPin. It supplements the TrustPin Privacy Policy and, for business customers, the applicable Data Processing Addendum (“DPA”).

TrustPin’s management systems (including the dashboard, management API, primary databases, and Auth0 tenant) are hosted in the European Union. Configuration content may be cached or delivered through global CDN edge locations outside the EEA.

Current sub-processors

TrustPin may use more than one CDN or storage provider, together with failover mechanisms, to improve resilience and availability.

Where customers configure their own CDN as the primary delivery path, that customer-selected provider is controlled by the customer and is not a TrustPin sub-processor solely because it is used by the customer. TrustPin-managed infrastructure may remain available as a fallback.

International transfers

Where personal data is transferred outside the EEA, the United Kingdom, or Switzerland, Capa7 relies on an applicable transfer safeguard, which may include:

• the European Commission’s Standard Contractual Clauses;
• the EU–US Data Privacy Framework where applicable;
• an adequacy decision; or
• another mechanism permitted by applicable data-protection law.

Global CDN and edge providers may transiently process device IP addresses and network metadata as technically necessary to deliver configuration content. TrustPin does not intentionally use those identifiers to identify application end users.

Changes to sub-processors

Capa7 may add or replace sub-processors to improve, secure, or maintain the Service.

For customers covered by a DPA, Capa7 will ordinarily provide at least 30 days’ prior notice of a new or replacement sub-processor that will process Customer Personal Data. Shorter notice may be given where a change is required urgently for security, legal compliance, service continuity, or provider discontinuation.

Customers may object within the applicable notice period on reasonable data-protection grounds, using the process described in the DPA.

Contact and notifications

Questions about this list, transfer safeguards, or sub-processor changes may be sent to:

• Privacy: privacy@trustpin.cloud
• Support: support@trustpin.cloud