Version 2
Effective date September 10, 2026
This register identifies providers that may process Customer Personal Data on Trampoline's behalf in connection with the Cloud Services and agentic data workflows. Actual use depends on the customer's deployment, region, selected model, feature, and configuration.
A provider selected and contracted directly by a customer, including through customer-supplied credentials, is generally a customer-directed Third Party Service rather than Trampoline's subprocessor for that processing. Public website marketing providers that do not process Customer Personal Data are described in the Privacy Policy, not this register.
1 Subprocessors
Provider and entity | Cloud function and data | Use | Location |
Amazon Web Services | Object and document storage, backups, and supporting cloud infrastructure. May process Customer Content, encrypted backups, identifiers, and operational metadata. | Deployment dependent | Customer-selected AWS region; support may involve other locations under AWS terms. |
Google Cloud | Application hosting, compute, storage, database, networking, and platform infrastructure. May process Customer Content, Account Data, logs, and operational metadata. | Deployment dependent | Customer-selected Google Cloud region; support may involve other locations under Google terms. |
OpenAI OpCo LLC or OpenAI Ireland Limited | Model inference and related AI processing. May receive prompts, document excerpts, instructions, and generated output needed for a selected Run. | Optional by model or feature | United States, Ireland, and provider locations applicable to the selected account and endpoint. |
Anthropic PBC | Model inference and related AI processing. May receive prompts, document excerpts, instructions, and generated output needed for a selected Run. | Optional by model or feature | United States and provider locations applicable to the selected account, endpoint, and available regional controls. |
Microsoft Corporation or applicable Microsoft affiliate | Azure infrastructure or model inference, including Azure-hosted AI services where selected. May process Customer Content and operational data required by that deployment. | Optional or deployment dependent | Customer-selected Azure region and locations governed by Microsoft's applicable product terms. |
Functional Software Inc doing business as Sentry | Error monitoring, diagnostics, and incident investigation. Intended to receive technical events, stack traces, account or request identifiers, and limited diagnostic context. | Production monitoring | United States and other approved Sentry processing locations under the service configuration. |
Clerk Inc | Authentication, user and organization management, session security, and identity events. Processes user contact details, identifiers, role or organization data, and authentication metadata. | Authentication dependent | United States and approved processing locations identified by Clerk. |
Intercom Inc or Intercom R and D Unlimited Company | Customer support and service communications. Processes user contact details, account context, support messages, attachments, and diagnostic details submitted in a support interaction. | Support dependent | United States, Ireland, or a contracted regional hosting location. |
PostHog Inc | Product analytics and feature measurement for the Cloud Services. Processes configured usage events, identifiers, device or request metadata, and feature interaction data. Customer Content is excluded by design unless intentionally included in an event. | Configuration dependent | United States or Germany for the selected PostHog Cloud region. |
Lunaweb GmbH doing business as CloudConvert | Customer-directed file conversion and document transformation. Processes files, source URLs, conversion instructions, and converted output for the duration needed to perform the conversion. | Optional by workflow | Germany and processing locations applicable to the selected CloudConvert API endpoint. |
2 Provider Data Controls
Trampoline configures business or API offerings and provider controls appropriate to the service. Model-provider inputs and outputs may not be used to train the provider's general models where Trampoline's applicable business terms prohibit that use. Provider logging and retention vary by account, endpoint, feature, abuse-monitoring status, region, and contract. A zero-data-retention setting applies only where it has been separately approved, contractually available, and enabled for the specific processing.
Customer can influence which optional model or conversion providers receive data by selecting supported models, features, regions, and Workflows. Disabling a provider prevents new configured transfers but does not itself delete data already held under an applicable retention period.
3 Subprocessor Changes
Trampoline will give customers at least 15 days' advance notice before adding or replacing a subprocessor that will process Customer Personal Data, except where an urgent change is reasonably necessary for security, availability, or legal compliance. Customers may object during that period on reasonable data-protection grounds by writing to privacy@trampoline.ai.
Trampoline will work in good faith to address an objection through configuration, additional information, or a commercially reasonable alternative. If no resolution is reasonably available, the remedies in the Data Processing Addendum apply.
4 Customer Directed Services
A Workflow may connect to a customer's own databases, storage, applications, model accounts, communication tools, and other systems. When the customer chooses the service, holds the account, supplies credentials, and determines the transfer, that provider ordinarily processes data under the customer's instructions and contract. Those services are not added to this register merely because Trampoline transmits data to them at the customer's direction.
5 Questions and Notices
Questions, objections, and requests to receive subprocessor change notices may be sent to privacy@trampoline.ai. The operative register will be published at Trampoline Subprocessors.