Subprocessors
Open Subprocessors in Thermal →
What it's for
Subprocessors is the public list of the providers Thermal relies on to operate the service. It exists so a buying committee's security and legal reviewers can see, in one place, who handles information on Thermal's behalf and what each provider does, instead of reading the list out of the Privacy Policy.
Reached from the Privacy Policy's "Service providers we work with" section and
from the Security page, or by visiting trythermal.com/subprocessors directly.
The route is /subprocessors.
Tabs
The page has no tabs. It is a single document: a short introduction followed by one table of providers.
Panels and controls
- A "Last updated" date under the title. It is shared by every row.
- The providers table has one row per provider, with the provider's name (linked to its website), what it does for Thermal, its processing class, the data categories and the hosting region.
- Processing classes are customer-data processing, optional or inactive integration, and internal-only processing. An integration that is not yet active in production, or that only runs if a customer connects it, is labelled as such, and the provider that handles only Thermal's own internal tasks says it never receives a customer's data.
- "Not verified" appears wherever Thermal has not yet confirmed a data category or a hosting region from its own records. The page does not guess.
The rows come from the same record as section 3 of the Privacy Policy, so the two pages list the same providers with the same descriptions.
What it accepts
Nothing. This is a static document — the only interactive elements are links.
How to configure it
Nothing in Settings changes this page. The provider details and the "last updated" date are edited in the shared provider record in the codebase when a provider is added, removed or re-qualified.
Who can see it
This is a public page. Anyone can open it, signed in or not.