TrackProject is currently available by invitation only.
Trust & Compliance · Trust

Subprocessors

Third-party processors TrackProject uses to deliver the service. Customers are notified at least 30 days before any change.

Versionv3.1Last updated2026-06-25Last audit2026-05-12
UK GDPREU GDPRCCPA / CPRAISO/IEC 27001:2022ISO/IEC 42001 (AI)SOC 2

Current subprocessors

The vendors below process customer data on TrackProject's behalf. We notify workspace administrators at least 30 days before adding or replacing a subprocessor.

Hosting

VendorPurposeRegionWebsite
CloudflareEdge delivery, CDN, DDoS protection, WAFGlobal edge, UK/EU originVisit
Lovable CloudApplication hosting, database, storage, authenticationEU / UKVisit

Storage

VendorPurposeRegionWebsite
SupabaseManaged Postgres, Auth, Storage (via Lovable Cloud)EU / UKVisit

Authentication

VendorPurposeRegionWebsite
GoogleOptional Google SSO sign-inGlobalVisit
MicrosoftOptional Microsoft Entra ID SSO sign-inGlobalVisit

Email

VendorPurposeRegionWebsite
ResendTransactional email deliveryEU / USVisit

Payments

VendorPurposeRegionWebsite
StripePayment processing and billingEU / UK / USVisit

Monitoring

VendorPurposeRegionWebsite
SentryApplication error monitoringEUVisit

AI

VendorPurposeRegionWebsite
Lovable AI GatewayAI inference routing for Assistant, Copilot, Twin Analyst, autonomous agentsEU / USVisit
OpenAIFoundation model inference via AI Gateway (no training on Customer data)US (SCCs in place)Visit
AnthropicFoundation model inference via AI Gateway (no training on Customer data)US (SCCs in place)Visit
Google GeminiFoundation model inference via AI Gateway (no training on Customer data)EU / USVisit

Questions about this document? Contact legal@track-project.com · Security: security@track-project.com

© 2026 TrackProject Ltd. Version 3.1 · Last updated 2026-06-25.

Version history

  • v3.12026-06-25Added Microsoft (Entra ID) as authentication subprocessor.
  • v3.02026-03-01Added Lovable AI Gateway and tier-2 model providers.