Legal
Sub-processors
Last updated: July 2026
Where Trenith LLC (“Trenith”) processes personal data on behalf of a client (as a processor / data processor), we may engage the third‑party sub‑processors listed below. Each is bound by data‑protection obligations consistent with our Data Processing Agreement and applicable law (including GDPR Article 28 and the India DPDP Act, 2023). This page is maintained and dated; see “Changes” below for how we notify clients of updates.
| Sub-processor | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website & application hosting, CDN, privacy-friendly analytics | USA / global edge |
| Razorpay Software Private Limited | Payment processing, India payments (UPI, cards, netbanking) for paid audits and invoicing (payment data is entered on and processed by Razorpay; it does not reach Trenith systems) | India |
| Stripe, Inc. | Payment processing, international card payments for paid audits and invoicing (card data is entered on and processed by Stripe; it does not reach Trenith systems) | USA / global |
| Google Cloud Platform (Google LLC) | Application compute (Cloud Run), database (Cloud SQL, PostgreSQL), file storage, secret management | USA / configured region |
| Google Workspace / Gmail (Google LLC) | Transactional & business email (e.g. contact and notification emails) | USA / global |
| Google Sign-In / OAuth (Google LLC) | Optional identity verification for reviewers and staff sign-in | USA / global |
| Google Analytics (Google LLC / Google Ireland Ltd.) | Website analytics and measurement. Loaded with Google Consent Mode v2 defaulting to denied, so no analytics cookies or advertising identifiers are set until a visitor accepts the cookie banner. Cookieless, aggregated pings may be sent before that choice for consent-mode modeling. | USA / EU / global |
| Cloudflare, Inc. | Bot/abuse protection (Turnstile) on the public contact and newsletter forms. Turnstile runs a lightweight browser challenge and processes limited technical signals to tell humans from bots. | USA / global edge |
Note: India payments run on Razorpay; international card payments currently run on Stripe and will migrate to Razorpay as international payment methods complete activation. Specific hosting regions can be confirmed on request.
Changes to this list
We operate a general‑authorisation model: by entering into our Data Processing Agreement, the client authorises the sub‑processors listed here and authorises us to engage new ones, provided we update this page and give advance notice of material changes so the client can object. To be notified of changes, email privacy@trenith.com.
Contact
Questions: privacy@trenith.com · Grievance Officer (India): grievance@trenith.com.