TrustPages.trustCenter / TrustPages.subprocessorsLabel
TrustPages.subprocessorsTitle
TrustPages.subprocessorsIntro
Netlify, Inc.
hosting · US (Netlify global edge; primary compute region us-east).
Hosts this site and its serverless functions; Netlify Blobs is the primary key-value store for accounts, subscriptions, seat-report ledgers, audits, policies and vault documents.
TrustPages.receives: Everything the app persists outside Convex — see lib/data-stores.ts for the store-by-store inventory.
TrustPages.source: lib/blobs.ts, netlify.toml
Convex, Inc.
database · US (Convex deployment wooden-crow-226).
System of record for user accounts, password resets, and the org backend v2 tables (orgs, memberships, invites, seats, subscriptions, policies, reports, audit, budgets).
TrustPages.receives: Account email + password hash; org membership rows keyed by email; hashed seat/actor identifiers; invite tokens (hashed, never plaintext).
TrustPages.source: lib/convex.ts, convex/schema.ts
Stripe, Inc.
payments · US, with EU processing for the Syba Europe BV account.
Payment processing and subscription billing. Hosted checkout; card data never reaches our servers.
TrustPages.receives: Email, name, billing address, plan/price selection. Card details go directly to Stripe.
TrustPages.source: lib/stripe.ts, docs/PAYMENTS.md
OpenRouter, Inc.
ai-inference · US-based routing; underlying model region depends on the provider selected.
Routes AI requests (public audit reasoning, dashboard concierge, and the extension's AI vision-escalation tier) to the underlying model provider.
TrustPages.receives: The prompt/context for the feature in use. For the extension's vision tier: page URL, page title, and a downscaled screenshot (longest edge capped at 1024px, sent only when the URL is not on the safe-domain list and a heuristic or content signal already fired).
TrustPages.source: lib/audit/reasoning-agent.ts, syba-agent-extension/lib/api.js (callOpenRouter), syba-agent-extension/lib/heuristics.js (fitDimensions, shouldEscalateToVision)
Anthropic, PBC
ai-inference · US.
Claude models behind the public audit reasoning agent and the dashboard concierge, called via @anthropic-ai/sdk with tool_use (never a raw fetch).
TrustPages.receives: The audit or concierge conversation context for the request in progress.
TrustPages.source: lib/audit/reasoning-agent.ts
Google LLC
identity · Global (Google infrastructure).
Optional Google sign-in, and Google Web Risk as one provider behind /api/extension/url-reputation.
TrustPages.receives: OAuth profile (email, name) for sign-in. For Web Risk, when GOOGLE_WEB_RISK_API_KEY is set: the full page URL a signed-in user's extension submitted, never page content. Hash-prefix lookups replace full URLs in plan U5 (not shipped).
TrustPages.source: app/api/auth/google/route.ts, lib/auth.ts (googleOAuthEnabled), app/api/extension/url-reputation/route.ts (checkGoogleWebRisk)
IPQualityScore LLC (IPQS)
threat-intel · US.
URL reputation provider behind /api/extension/url-reputation, called when IPQS_API_KEY is set.
TrustPages.receives: The full page URL a signed-in user's extension submitted. Stripping before send is planned (U5), not shipped.
TrustPages.source: app/api/extension/url-reputation/route.ts (checkIpqs)
Resend, Inc.
email · US.
Transactional email — onboarding, password reset, invite delivery, and the 6-digit email-verification code.
TrustPages.receives: Recipient email address and the transactional message content (never a marketing list).
TrustPages.source: lib/transactional-email.ts
Have I Been Pwned (Troy Hunt)
threat-intel · Global (Cloudflare-fronted).
Breach-exposure lookups for the account email you ask us to check, and (v3, when HIBP_API_KEY is configured) for named-breach detail; falls back to a k-anonymity Pwned Passwords presence check.
TrustPages.receives: The email address being checked (HIBP v3), or a truncated SHA-1 prefix only (k-anonymity fallback — the full hash and the email never leave this server).
TrustPages.source: lib/breach-monitor.ts
VirusTotal (Google)
threat-intel · Not established from our code; see the provider's terms.
URL reputation read behind /api/extension/url-reputation when VIRUSTOTAL_API_KEY is set. Removal approved (O9); it stops at the next production deploy.
TrustPages.receives: The full page URL, base64url-encoded in the lookup path (a read of an existing report; the URL is never submitted for scanning).
TrustPages.source: app/api/extension/url-reputation/route.ts (checkVirusTotal)
urlscan.io
threat-intel · Not established from our code; see the provider's terms.
Search of existing scans behind /api/extension/url-reputation when URLSCAN_API_KEY is set. Removal approved (O9); it stops at the next production deploy.
TrustPages.receives: The page URL as a search query; the URL is never submitted for a new scan.
TrustPages.source: app/api/extension/url-reputation/route.ts (checkUrlscan)
AbuseIPDB
threat-intel · Not established from our code; see the provider's terms.
IP reputation behind /api/extension/url-reputation when ABUSEIPDB_API_KEY is set.
TrustPages.receives: The IP address the page host resolves to; no URL path.
TrustPages.source: app/api/extension/url-reputation/route.ts (checkAbuseIpdb)
TrustPages.plannedTitle
TrustPages.plannedIntro
Cloudflare, Inc.
threat-intel · Global (Cloudflare network).
Planned (U6, U8): URL Scanner in unlisted mode and certificate-transparency lookalike-domain intelligence for the reputation tier. No current build calls Cloudflare.
TrustPages.receives: Planned: a stripped URL or domain, never a customer identity.
TrustPages.source: docs/plans/2026-09-14-1330-feat-syba-shield-2-enterprise-plan.md (U8, E42)
abuse.ch
threat-intel · Switzerland (Bern University of Applied Sciences).
Planned (U4, U6): licence-clean community malware and phishing data for the bundled blocklist and the consensus tier.
TrustPages.receives: Planned: a stripped URL or domain.
TrustPages.source: docs/plans/2026-09-14-1330-feat-syba-shield-2-enterprise-plan.md (U4, U6)