Sub-processors Directory
Transparency on the infrastructure partners Trequa engages to host, process, and protect Touchline360 workspaces.
Last updated 2026-10-24Our approach to sub-processors
To deliver a resilient, low-latency, and high-availability coaching workspace, Trequa partners with specialized cloud infrastructure providers. We maintain a strict vetting standard: every sub-processor undergoes security due diligence, adheres to data protection agreements incorporating Standard Contractual Clauses (SCCs), and maintains audited compliance standards (such as SOC 2 Type II or ISO 27001).
We do not sell data to third parties, and no advertising network or unauthorized AI research platform ever has access to your club’s content.
Authorized infrastructure sub-processors
The following third-party entities are authorized to process data on behalf of Touchline360:
| Sub-processor | Role & Service | Data Processed | Location | Safeguards |
|---|---|---|---|---|
| Railway Corporation | Cloud application hosting, API gateway, and container compute execution | Encrypted application payloads, user session tokens, tactical analysis requests | United States / European Union (region-configurable for enterprise) | Data Processing Agreement, SOC 2 Type II, ISO 27001, EU-US Data Privacy Framework / SCCs |
| Cloud Object Storage (AWS / Cloudflare) | Encrypted match video, clip cache, and keyframe thumbnail storage | Customer match footage, transcoded stream segments, optical frame assets | United States / European Union | Data Processing Agreement, SOC 2 Type II, ISO 27001, AES-256 server-side encryption |
| Managed PostgreSQL Infrastructure | Multi-tenant relational database for club tenancies, rosters, and tactical notes | Account credentials, club identifiers, squad rosters, coach findings, lineups | United States / European Union | Data Processing Agreement, SOC 2 Type II, strict network isolation, encryption at rest |
| Transactional Email Relay (Resend / AWS SES) | Transactional delivery of sign-in verification, password resets, and system notices | Staff email addresses, message delivery logs (no match footage or tactical plans) | United States / European Union | Data Processing Agreement, TLS 1.3 in transit, strict zero-marketing policy |
Corporate affiliates
Trequa operates Touchline360. Authorized technical personnel employed directly by Trequa may access infrastructure for maintenance, debugging, and customer-requested support under strict confidential obligations and multi-factor authentication controls.
Change notification and objection process
In accordance with our Data Processing Addendum, Trequa notifies registered customer administrators at least thirty (30) calendar days prior to adding or replacing any sub-processor.
Customers may object in writing on legitimate data protection grounds by submitting notice via our contact form or emailing security@touchline360.com within the 30-day window. If the parties cannot resolve the objection cooperatively, Customer may terminate the affected service without penalty.