Sub-Processors
Last reviewed: 14 May 2026
True Blue Horizon engages the sub-processors below to help us deliver the Service. Each is bound by contractual obligations that include data protection, confidentiality, and security commitments at least as protective as those in our Data Processing Addendum. We remain accountable for sub-processor performance.
To subscribe to email notifications of changes (at least 30 days' advance notice), email privacy@truebluehorizon.com with the subject “Subscribe: Sub-Processor Updates”.
Infrastructure & Storage
| Sub-processor | Purpose | Location |
|---|---|---|
| Google Cloud Platform (Compute Engine, Cloud Run, BigQuery) | Hosting, historical telemetry storage | United States |
| Supabase | Authentication, PostgreSQL database, real-time | United States |
| Cloudflare | CDN, DDoS protection, bot management | Global edge / United States primary |
| Tailscale | Secure connectivity to on-vessel Gateway | United States |
AI, Analytics & Mapping
| Sub-processor | Purpose | Location |
|---|---|---|
| Google Vertex AI (Gemini) | AI chat inference (enterprise tier; no training on Customer Data) | United States |
| MapTiler | Vector and raster map tiles | Switzerland / EU |
| OpenSeaMap | Optional seamark overlay | EU (community-hosted) |
| Google Analytics 4 | Marketing-site analytics (with consent) | United States |
Payments, Email & Operations
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing, billing | United States |
| Transactional email provider | Account, billing, and notification emails | United States |
| Error and performance monitoring | Diagnostic logging of Service errors | United States / EU |
| Support / helpdesk tooling | Support tickets and customer communication | United States |
Specific vendor names for email, monitoring, and support are available on request to Custom-tier customers under NDA. We update this list whenever sub-processors change.
Change Process
We give at least 30 days' notice before adding or replacing a sub-processor. Customers under the DPA may object during the notice period by terminating the affected portion of the Service with a pro-rata refund of prepaid fees.