CertiTrack Trust
Subprocessors
Effective date: October 12, 2026
CertiTrack uses carefully selected subprocessors to deliver the Service. Categories below may evolve; enterprise customers receive updates as described in the DPA.
Infrastructure and hosting
- Amazon Web Services (Canada Central) — primary application hosting, databases, object storage, and related infrastructure in Canada
Application and data platform
- Supabase / managed Postgres ecosystem — application database, auth, and related backend services as configured for the deployment
Email and notifications
- Transactional email and delivery providers used to send invitations, security alerts, and product notices (specific vendor may vary by environment)
Support and operations
- Tools used by EspyAds personnel for customer support and secure operations, under access controls
Customer-controlled integrations
When Customer enables SFTP, HRIS, SSO, webhooks, or email-to-compliance, Customer may cause data to flow to Customer-selected systems. Those systems are Customer’s processors, not CertiTrack subprocessors, unless otherwise agreed.
Questions
For transparency only — not legal advice. Signed agreements: legal@espyads.net.