Sub-processors

Last updated 26 September 2026. The third parties that may process personal data in Triad Core on behalf of our customers, what for, and where. We announce a new one at least 30 days before it starts (see the data processing addendum).

Always used

Google LLC (Google Cloud Platform): hosting (Cloud Run), database (Cloud SQL for PostgreSQL), file storage, backups, logs and secret storage. Location: United States, us-east4 (Northern Virginia).

Used only when the customer switches the feature on

Google LLC (Vertex AI, Gemini models): Triad AI answers and proposals. Location: United States. Google Cloud terms do not allow training Google models on customer data.
Google LLC (Google Identity): Sign in with Google, for people who choose it. Location: global.
Google LLC (Gmail API, Google Calendar API): mailboxes and calendars a person chooses to connect. Location: global (Google's mail infrastructure).
Microsoft Corporation (Microsoft Graph): Microsoft 365 mailboxes a person chooses to connect. Location: per the customer's Microsoft 365 tenant.
Resend, Inc.: delivery of service emails (invitations, password resets, approvals, documents sent to a customer's contacts). Location: United States. Listed here before it is switched on; until then service emails are not delivered by a third party.

Not sub-processors

Integrations a customer sets up itself in the Connection Center (for example its own accounting system or webhook endpoints) receive data on the customer's instruction and are the customer's own providers.

Updates

To be told about changes, ask office@triadglobal.org to add your administrator to the notice list; customer administrators are on it by default.