Sub-processors
The third parties that process data on our behalf to run Treica, what each does, and where.
Last updated 2026-07-28
Who processes data for us
We use a small number of providers to run the service. This list is factual and reflects the deployment as it stands; we will update it before adding a new sub-processor.
| Sub-processor | Purpose | Data it handles | Location |
|---|---|---|---|
| Neon (database) | The application database | All register content, evidence metadata, users and the audit log | European Union (Frankfurt, Germany) |
| Vercel Inc. | Application hosting, content delivery and blob storage for uploaded evidence | Requests, uploaded evidence files, operational logs | [EVIDENCE STORAGE REGION - confirm]; the platform itself operates globally |
| Resend | Transactional email (sign-in links, invitations, digests) | Recipient name and email address, message content | United States, under standard contractual clauses |
| Anthropic PBC, via Vercel AI Gateway | AI-assisted features only, and only when a workspace is on Premium AND an owner has switched AI on | Only the document or answers submitted for that specific action; never the register | Not used for model training |
What is not sub-processed
- There is no advertising, analytics or tracking provider.
- AI providers receive nothing at all unless a workspace is entitled AND an owner has enabled AI - and then only that action's own input.
- No provider receives the register as a whole.
Changes
We will publish any addition here before it takes effect, so a customer can object under their data processing agreement.