Legal and trust
Subprocessors
Trough uses the providers below to operate core functions or optional features. A provider only receives the categories reasonably needed for the enabled function.
Core providers
- Vercel — application hosting, serverless execution, deployment, and Blob file storage.
- Neon or the configured managed PostgreSQL provider — application database hosting and recovery features selected for the deployment.
- Clerk — authentication, account identity, sessions, and invitations.
- Stripe — Trough subscription billing and, when enabled by a contractor, connected payment and checkout services.
- Resend — transactional and permitted contractor email delivery when email is configured.
Feature-dependent providers
- Sentry — application error and performance monitoring when a Sentry DSN is configured.
- Google Maps Platform — address, mapping, routing, or property-location functions when enabled.
- Estated or another configured property-data provider — property information requested by an authorized workspace user when enabled.
- OpenAI — optional AI-assisted review features only after the feature and server-side provider account are enabled; Trough's current policy requires data minimization and human review.
Changes and objections
Trough may add or replace providers as the Service develops. Material new processing will be reflected on this page before or when the provider begins processing production customer data. Customers with a contractual right to object should contact support@trough.app with a reasonable data-protection basis; Trough will work in good faith on an available alternative, configuration change, or termination option.
Customer-directed integrations
A contractor may connect services that it selects and controls. Those customer-directed providers are not Trough subprocessors to the extent the contractor independently instructs and contracts with them, although Trough will still protect credentials and limit data sent through the integration.