LEGAL
Sub-processor List
Last updated: 17 July 2026 · Version 2.0
1. Scope
This list identifies the sub-processors engaged by TruSecure to process personal data in connection with trusecure.co and Resilience Fabric. It fulfils the disclosure obligations in GDPR Art. 28(2) and (4) and UK GDPR Art. 28(2) and (4).
2. Subscriptions to changes
To subscribe to notifications of changes to this list, contact trust@trusecure.co. Subscribers will be notified at least 30 days before a sub-processor is added or replaced, except where a shorter period is necessary to respond to an incident or to comply with law.
3. Active sub-processors
| Sub-processor | Purpose | Categories of personal data | Location | Transfer mechanism (if outside EEA) |
|---|---|---|---|---|
| OVH HOSTING LIMITED (CRO 468585, VAT IE9520632R), Enterprise House, O'Brien Road, Co. Carlow, Carlow, R93Y0Y3, Ireland — subsidiary of OVH Groupe SA (RCS Lille 537 407 926, 2 rue Kellermann, 59100 Roubaix, France) | Hosting of Resilience Fabric infrastructure, storage, backups | All Customer Content | French and German datacenters (EEA) | n/a |
4. Independent controllers
Some recipients receive personal data as independent controllers, not as TruSecure's processors. Examples include:
- Tax authorities, which receive invoicing data under their own legal mandate;
- Courts, which receive data under procedural law.
These recipients are not listed in section 3.
5. Discontinued sub-processors (last 24 months)
None.