Subprocessors
Subprocessor disclosure for security review.
This page is the public review surface for providers used to deliver TARE. Confirm provider scope and contractual terms during procurement because deployment configuration can vary by customer.
Provider review table
The security packet should include provider name, purpose, data categories, region if known, provider terms/privacy link, and whether the provider is required or optional for the scoped workflow.
- Hosting and application delivery
- Database and storage
- Email delivery
- Payments where checkout is enabled
- AI/model providers where AI features are enabled
- Monitoring and error reporting
Customer-specific scope
A provider being listed does not mean every customer workflow sends every data category to that provider. Security review should be tied to the customer's enabled features and contract terms.