Subprocessors
Last updated: 2026
This is the complete list of third parties that may process data as part of running Trustfield. We keep it short on purpose.
| Vendor | Purpose | Data involved | Region |
|---|---|---|---|
| Render | Application hosting | Report data in transit and at rest during processing | United States |
| Supabase | Report storage | Report JSON, findings, evidence snippets, target URL, email | United States |
| Cloudflare | DNS, TLS and traffic proxy | Request metadata (IP, headers) in transit | Global edge |
| Razorpay | Payments and refunds | Payment details, email, amount (card data stays with Razorpay) | India |
| Resend | Transactional email | Email address, report link, receipt details | United States |
| Hostinger | Domain and mailbox | Email address and message contents | European Union |
We do not sell data and we do not share it for advertising. A data-processing agreement is available on request for business customers: info@trustfield.dev.
Reports are deleted after 30 days; email addresses are kept until you ask us to delete them. See /security and /privacy.