Subprocessors
Who Truss runs on.
Every outside provider that handles what a firm and its witnesses put into Truss, what each one does, and what it sees and keeps.
Last updated October 9, 2026. The Security page says how the data is protected and when it is deleted.
AI provider
What it does
What it sees and keeps
OpenAI
The models that read the record, draft the outline, play the examiner and the witness, and write reports.
Keeps nothing: zero data retention. It sees your files and what Truss builds from them: facts, outlines, chats, and transcripts. Never the recording, or anyone's voice or video.
Tavus
The voice and face on the other side of a call.
Keeps only session ids, times, and status: zero data retention. It sees the audio and video of the call, the lines spoken in it, which can quote the record, and the witness's name in the opening greeting. Never uploaded files, facts, the outline, or agent chats.
Other provider
What it does
What it sees and keeps
Daily
Tavus's video service. Runs the room a call happens in.
Receives the audio and video of each call, and writes the recording straight into Truss's own storage. The caller's browser connects to it directly, so it sees the browser's address.
Cartesia
Tavus's voice service. Speaks the AI's lines.
Receives the lines the AI speaks, which can quote the record.
Supabase
The database, uploaded files, and sign-in.
Stores case data in the United States, encrypted at rest.
Amazon S3
Call recordings.
Stores recordings in the United States, encrypted at rest.
Vercel and Railway
Host the web app and the api.
Vercel caches the pages a signed-in person opens, which can hold case data, and refreshes them when the data changes. Railway stores no case data.
Stripe
Payment.
Sees the firm's name, its billing email, and each invoice line, which names the witness, the case, and who created the session.
Resend
Sends Truss's emails.
Sees each recipient's address and what the email says.
Sentry
Error reports and performance traces.
Receives them with session tokens, sign-in codes, query strings, and email addresses removed. It records no screen replays.
Google
Sign-in, for those who choose it.
Passes Truss the email address of a person who signs in with it.
Cal.com
Demo bookings.
Sees the name, email address, and time a visitor enters to book a demo.
Slack
Truss's own alerts and demo bookings.
Sees the name, email address, and time of each demo booking.
Every connection is encrypted in transit.