Technology & International Data Transfers

CXTRUST may use specialist providers for infrastructure, communications, payments, security and AI-assisted processing. This page explains the categories and safeguards without exposing credentials or sensitive architecture.

← Trust & Privacy Centre

Website & hostingApplication delivery, storage, backups and platform operation.

Email deliveryOTP, applicant access, operational notifications and service communications.

Payment processingRecognition checkout, payment status and transaction processing.

AI infrastructureAI-assisted classification, extraction and evidence validation where configured.

Security & diagnosticsMonitoring, spam/abuse prevention, logging and service reliability.

Analytics / optional technologiesSite measurement or experience technologies where configured and permitted.

International processing

Some providers may process or store information outside Malaysia or outside the user's country. Where cross-border transfer requirements apply, CXTRUST considers the purpose, destination, provider, data sensitivity, contractual arrangements and technical/organisational safeguards relevant to the transfer.

Data minimisation

Applicants should avoid unnecessary personal information in evidence packs. Service providers should receive only information reasonably needed for their role.

Provider changes

The technology stack may evolve. CXTRUST reviews material provider changes in light of privacy, security, transfer and operational requirements. For procurement or privacy due-diligence questions, contact info@cxtrustmark.com.