TrustFill AI

Processing inventory

Current infrastructure and external processing boundaries.

This draft lists deployed or selected services factually; it does not infer contractual protections that have not been verified.

Closed beta draft · Updated August 24, 2026 · Legal review required

DigitalOcean

Purpose: production compute and host monitoring. Current location: Singapore production host. PostgreSQL, the Web application, and the private Worker run on the designated host.

Maimaiya OpenAI-compatible gateway

Purpose: chat-model generation and independent answer verification. Selected questions and evidence excerpts may be transmitted. Public gateway status currently reports its privacy policy and user agreement as disabled; retention, training, residency, deletion, DPA, security-incident, and downstream-provider terms are not verified.

Object-storage provider

Status: not yet provisioned or activated. TrustFill will publish the actual provider and region here only after the operator creates the approved private bucket and the real storage gate passes. Until then, customer data is not allowed.

Local semantic model

The 384-dimensional Sentence Transformer embedding model executes inside the private Worker. Evidence used for embeddings is not sent to a separate embedding API in the current production configuration.