◈Data residency

Your trail book stays in Australia.

The primary database, daily backups, and all Edge Function execution run inside a single Australian region. This page lists every sub-processor and what they hold.

Primary region

AWS Sydney · ap-southeast-2

All portfolio rows, encrypted backups, authentication tokens and AI Insights edge execution sit inside this region. No replication outside Australia.

Encryption

AES-256 at rest · TLS 1.2+ in transit

Database volumes are encrypted with AWS-managed keys. Every connection to the application and database is enforced over TLS.

⬡Sub-processors

Who holds what.

Provider	Purpose	Region	Data held
Supabase	Managed Postgres, Auth, Edge Functions	AWS Sydney · ap-southeast-2	Portfolio, account, audit log
Stripe	Card processing and subscription management	AU + global	Card, billing, customer ID
Anthropic	AI Insights (platform key path)	United States	Aggregate KPIs only — no PII
OpenAI	AI Insights (BYOK only)	United States	Aggregate KPIs only — no PII
Google Gemini	AI Insights (BYOK only)	United States	Aggregate KPIs only — no PII
Vercel	Hosting and edge caching for marketing pages	Global edge	IP, user-agent

We notify account admins by email at least 30 days before adding or replacing a sub-processor. Procurement teams can request a signed copy of our sub-processor register from security@trailscope.com.au.