TrustAI Sub-processors
Last updated: November 12, 2026
Provar Limited uses the sub-processors below to provide TrustAI. This page is the authoritative list of Provar’s sub-processors under our Terms of Service and Data Processing Addendum (DPA). Each one is bound by a written agreement with data protection terms at least as protective as those in our DPA.
| Sub-processor | What it does | Customer data it handles | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting, storage, database, secrets and logs | All customer data | United States; United Kingdom |
| Amazon Web Services, Inc. (Amazon Bedrock) | Running AI models (Anthropic Claude and OpenAI GPT models) within Provar’s own AWS account | The content of each model call: specs, tests, transcripts and screenshots | The customer’s hosting geography: United States, or United Kingdom and EU |
| WorkOS, Inc. | Sign-in, single sign-on, user directory and invitation emails | User names, email addresses and organization membership | United States |
| Provar, Inc. (Provar subsidiary) | Engineering, operations and customer support for TrustAI | Customer data its staff need to access to operate and support TrustAI | United States |
| Provartesting India Private Limited (Provar subsidiary) | Engineering, operations and customer support for TrustAI | Customer data its staff need to access to operate and support TrustAI | India |
A customer’s own test systems, the AI tools its users choose to connect, and any model endpoint, AWS account or other service a customer directs TrustAI to use with its own keys act for the customer and are not Provar sub-processors.
Provar Limited’s own employees in the United Kingdom are not sub-processors. Provar’s staff in the United States and India are employed by the Provar subsidiaries listed above.
AI model providers
TrustAI runs AI models, including Anthropic Claude and OpenAI GPT models, through Amazon Bedrock in Provar’s own AWS account, with processing, unless otherwise agreed with the customer, in the same geography as the customer’s hosting region: the United States for customers hosted in the United States, and the United Kingdom or the EU for customers hosted in the United Kingdom. AWS states that model providers such as Anthropic and OpenAI have no access to prompts or outputs, and that Bedrock inputs and outputs are not used to train models. For that reason, model providers are not sub-processors.
Changes
We give notice of new sub-processors, and customers may object, as described in Section 4 of our Data Processing Addendum.
If we need to replace a sub-processor sooner to protect the security of TrustAI or to comply with law, we’ll give notice as soon as reasonably possible, as Section 4.5 of the DPA allows.
Anyone else who wants update emails can email privacy@provartesting.com with “Sub-processor updates” in the subject.