Trust hub
Subprocessor transparency
Enterprise clients receive notice before material subprocessor changes.
Control surface
Subprocessor transparency
Access
Role boundaries, MFA assumptions, and review ownership are explicit.
Policy
Terms, privacy, subprocessors, and incident notes stay linked.
Evidence
Changes, exceptions, and approvals are documented before release.
Buyer check
A procurement or legal reviewer can inspect the operating stance quickly.
Subprocessors
Current vendor categories
Enterprise customers receive notice before material subprocessor changes where contractually required. Not every vendor is used for every client; subprocessors depend on the agreed scope and tools.
| Vendor | Purpose | Data location | Use |
|---|---|---|---|
| Vercel / VPS hosting | Hosting and delivery | India / EU / US as configured | Production website and APIs |
| Cloudflare | DNS, security, Turnstile | Global | Bot protection and domain security |
| Google Workspace | Email and documents | India / global | Business communication |
| Microsoft 365 | Customer tenant support | Customer selected | Optional collaboration stack |
| OpenAI | LLM processing | Provider controlled | Approved AI workflows |
| Anthropic | LLM processing | Provider controlled | Approved AI workflows |
| Meta / WhatsApp | Messaging | Provider controlled | WhatsApp Business messaging |
| Razorpay | Payments | India | Payment workflows where scoped |
| Shiprocket | Shipping | India | D2C logistics where scoped |
Policy position
A table of hosting, email, analytics, LLM, messaging, and cloud vendors. Not every vendor is used for every client; subprocessors depend on the agreed scope and tools.
This page is reviewed on a scheduled cadence. Enterprise clients can request supporting artifacts during procurement, onboarding, or renewal.
Operating controls
Controls are mapped to owner, cadence, artifact, escalation route, and client-facing evidence where applicable. We do not claim certification unless expressly stated in an accepted SOW.
- Owner assigned
- Last reviewed 2026-05-03
- Next review due 2026-08-03
- Evidence retained in the governance workspace