Companies / traceroot / Subprocessors
TraceRoot is an open-source platform that traces AI agents in production, detects failures, and helps coding agents reproduce and fix them. It serves developers and teams building and maintaining AI agents.
Summarized from its homepage on 4 Nov 2026.
Subprocessors of traceroot
traceroot declares 11 subprocessors, including AI providers Anthropic, OpenAI.
| Subprocessor | Purpose |
|---|---|
| Hosting, storage, databases (all customer data at rest) | |
| Language models for agent and detector features | |
| DNS for traceroot.ai (no customer data) | |
| Isolated sandboxes for the analysis agent | |
| GitHub, Slack | Only when you connect them, to read repositories or deliver alerts |
| Optional sign-in | |
| Language models for agent and detector features | |
| Product analytics (account data only) | |
| Transactional email | |
| Billing and payments |
1 more subprocessor
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inQuestions about traceroot
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| HIPAACompany's statement | “SOC 2 Type II , HIPAA , ISO 27001 audited by Oneleet.”The company's own statement of compliance. There is no official HIPAA certification or registry. | 11 Nov 2026Source |
| ISO 27001Company's statement | “SOC 2 Type II , HIPAA , ISO 27001 audited by Oneleet.”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
| SOC 2 Type IICompany's statement | “SOC 2 Type II , HIPAA , ISO 27001 audited by Oneleet.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean traceroot lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See traceroot's full stack
Every vendor with its source and date, and an alert when traceroot adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call