A fixed-price gap analysis, remediation through to your audit, and upkeep after it. All in a workspace you keep.
All compliance →Led by a published security researcher with five CVEs. One standard report, letters for your buyers, and retests of your fixes.
All security →To the people you sell to, raise from or answer to.
All industries →Original research, free tools, and plain-language guides on security and compliance, from a published security researcher.
Read the blog →Last updated: October 2026
TrazTech uses the service providers below to deliver our services. Each one is bound by confidentiality and security terms appropriate to the data it handles. The TrazTech Workspace is hosted in Canada. Not all of our subprocessors are in Canada; each one's location is shown below.
We keep this list current. When we add or replace a provider that processes client materials, we update this page and tell active clients. If you object to a new provider, contact us before the change takes effect and we will work with you on an alternative.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Akamai Connected Cloud | Hosting for the TrazTech Workspace and its database | All Workspace content | Canada |
| Anthropic, PBC | AI-assisted drafting, summarization and analysis, including AI features in the Workspace | Workspace content and documents processed by AI features; no training on client data; deleted within 30 days | United States |
| Google (Google Workspace) | Email, calendar and document collaboration | Correspondence and shared documents | Canada and United States |
| 1Password | Secure sharing and storage of credentials | Credentials shared for testing and access | Canada |
| BoldSign | Electronic signature of agreements | Signatory names, emails and signed agreements | Canada |
| Stripe | Invoicing and payments | Billing contact and payment information | United States, Canada |
| Calendly | Meeting scheduling | Names, emails and meeting details | United States |
| Delivery partners (penetration testing, incident response) | Specialist delivery on specific engagements | Only the data needed for that engagement | Canada and United States. Disclosed by name to the affected client before work starts |
Questions about how we handle data: [email protected]
Related reading: how we use AI, the Privacy Policy, and the Terms of Service.