Trust Center

Data flow and residency

How connection data and evidence move through the service, including the current residency limitation.

Data flow

  1. An authorized user begins an OAuth connection and reviews the requested scopes.
  2. The provider returns a credential to a server callback. Trytracegrid encrypts it before database storage.
  3. Audits retrieve only the resources needed for the selected brand and store sanitized findings and evidence.
  4. When AI explanation is requested, only the context required for that task is sent, with secrets and direct identifiers excluded or redacted.
  5. Approved test writes are executed directly by a deterministic provider adapter and read back for verification.

Residency

Trytracegrid does not make an EU-only residency claim unless the production database and sensitive processing have been migrated to documented EU regions. Contact support for the current deployment region before relying on a residency requirement.

International processing

Subprocessors may process data in the locations described in their applicable agreements. Contractual transfer measures are addressed through the private DPA execution process.