Legal
Subprocessors
Vendor categories that may support DataDost delivery, depending on the accepted scope, tools, and region.
Control surface
Subprocessors
Access
Role boundaries, MFA assumptions, and review ownership are explicit.
Policy
Terms, privacy, subprocessors, and incident notes stay linked.
Evidence
Changes, exceptions, and approvals are documented before release.
Buyer check
A procurement or legal reviewer can inspect the operating stance quickly.
Subprocessors
Current vendor categories
Enterprise customers receive notice before material subprocessor changes where contractually required. Not every vendor is used for every client; subprocessors depend on the agreed scope and tools.
| Vendor | Purpose | Data location | Use |
|---|---|---|---|
| Vercel / VPS hosting | Hosting and delivery | India / EU / US as configured | Production website and APIs |
| Cloudflare | DNS, security, Turnstile | Global | Bot protection and domain security |
| Google Workspace | Email and documents | India / global | Business communication |
| Microsoft 365 | Customer tenant support | Customer selected | Optional collaboration stack |
| OpenAI | LLM processing | Provider controlled | Approved AI workflows |
| Anthropic | LLM processing | Provider controlled | Approved AI workflows |
| Meta / WhatsApp | Messaging | Provider controlled | WhatsApp Business messaging |
| Razorpay | Payments | India | Payment workflows where scoped |
| Shiprocket | Shipping | India | D2C logistics where scoped |
Scope-dependent vendor use
Not every vendor category is used for every client. Subprocessors depend on the accepted Proposal or SOW, selected tools, hosting region, messaging channels, analytics consent choices, and client requirements.
DataDost can support client-specific subprocessor review, data-flow notes, retention expectations, and change notice requirements where those controls are included in the accepted scope.
- Scope-dependent
- Region-dependent
- Analytics consent respected
- Client review supported
- No blanket certification claim
Current categories
Typical categories include hosting and delivery platforms, business email and document tools, analytics providers after consent, LLM/API providers where scoped, messaging providers, payment providers, logistics providers, and support/outbox storage.
Client-specific subprocessors, data locations, and processing instructions should be confirmed in the accepted SOW or proposal.