1. About our sub-processors
To provide the Services, we engage trusted third parties (“sub-processors”) that may process personal information on our behalf. We require sub-processors to protect personal information consistent with our Privacy Policy and applicable law. This page lists our current sub-processors.
[Attorney review] Confirm this is the complete and accurate list, that a data processing agreement (DPA) is in place with each, and the actual processing location/region for each entry. NOTE (2026-07-27): the Microsoft Azure row previously read 'Canada / United States / Europe'. Solidlio operates ONE deployment, in Azure Canada Central; there is no US or EU hosting region. The remaining 'region-dependent' entries are the sub-processor's own footprint, not a Solidlio region — they should be replaced with each vendor's actual processing locations.
2. Current sub-processors
| Sub-processor | Purpose | Data categories | Region / location |
|---|---|---|---|
| Stripe | Payment processing (card and pre-authorized debit) | Billing contact, payment details | See Stripe (region-dependent) |
| Anthropic | AI-assisted features | AI feature inputs and outputs | See Anthropic (region-dependent) |
| Microsoft Azure | Cloud hosting and infrastructure | All Service data | Canada (Canada Central) |
| SendGrid | Transactional and outbound email delivery | Email addresses, message content | Region-dependent |
| Microsoft 365 | Customer-connected email and productivity integration | Mailbox and integration data the customer connects | Customer-controlled |
| QuickBooks | Accounting integration (when enabled by the customer) | Billing and accounting records | Region-dependent |
| TD Synnex | Distributor integration (when enabled by the customer) | Product and order data | Region-dependent |
| Ingram Micro | Distributor integration (when enabled by the customer) | Product and order data | Region-dependent |
3. What this means for data residency
Solidlio itself runs in one region: Microsoft Azure Canada Central, with backups retained in Canada. Several of the sub-processors above operate outside Canada, so data sent to them leaves Canada even though our hosting does not.
- AI features send ticket text, knowledge documents and the resulting output to Anthropic in the United States. Semantic search sends the same categories of text to Voyage AI in the United States.
- Outbound and inbound email passes through SendGrid in the United States, including the full message body.
- Payment details are processed by Stripe outside Canada.
- Address autocomplete sends the partial address a user types to Geoapify in the European Union.
If your requirement is that no personal information leaves Canada, the AI and semantic-search features must be left disabled. That is a real constraint on what the product can do for you, not a caveat.
[Attorney review] The cross-border position itself is settled — PIPEDA permits transfer to a processor as a use, subject to accountability and transparency, and Alberta PIPA requires the countries and purposes to be stated, which this list does. What remains is per-vendor: confirm the contracting entity and current DPA terms for each provider, and complete a Quebec Law 25 privacy impact assessment before selling into Quebec.
4. Changes and notifications
We may add or replace sub-processors as the Services evolve. When we do, we will update this page and, where required by our customer agreements, provide advance notice so customers can review the change.
[Attorney review] Confirm the change-notification mechanism and notice period (e.g., email to admins, subscribable feed) and any customer right to object under the DPA.
5. Contact
Questions about our sub-processors can be sent to support@solidlio.com.
Contact us
Tridacom IT Solutions Inc. — 10215 178 Street NW, Edmonton, Alberta, T5S 1M3, Canada.
Phone: 888-858-4765 · Email: support@solidlio.com