Trust · Subprocessors
Every third party that touches your data, named.
We list everyone. We do not have a "and various advertising partners" line. If a subprocessor changes, this page changes within seventy-two hours and we notify customers via in-app banner.
| Subprocessor | Purpose | Region | PII access | Last reviewed |
|---|---|---|---|---|
| Supabase | Postgres, Auth, Storage, Edge Functions | Mumbai (ap-south-1) | Yes (encrypted) | Apr 2026 |
| Anthropic | Claude Sonnet 4.5 for Section 12 and DPB drafting | US (enterprise no-retention) | Transient (no retention) | Apr 2026 |
| Razorpay | Billing, GST invoicing | India | Yes (name, email, phone) | Mar 2026 |
| Gupshup | WhatsApp Business API for alerts | India | Yes (phone, alert content) | Mar 2026 |
| Resend | Transactional email | US / EU | Yes (email, content) | Apr 2026 |
| MSG91 | Transactional SMS | India | Yes (phone, content) | Mar 2026 |
| OneSignal | Push notifications | US | Tokenised | Apr 2026 |
| Upstash | Redis for rate limits and queues | Mumbai (ap-south-1) | No (job IDs only) | Apr 2026 |
| Bright Data | Residential proxy for site scanning | Global | No (proxied requests only) | Apr 2026 |
| Have I Been Pwned | Breach lookup | Australia / EU | Hashed identifiers only | Apr 2026 |
| DeHashed | Credential leak lookup | US | Hashed identifiers only | Apr 2026 |
| IntelX | Paste-site monitoring | Czechia (EU) | Hashed identifiers only | Apr 2026 |
| LeakCheck | Leak lookup | Estonia (EU) | Hashed identifiers only | Apr 2026 |
| Constella | Dark web threat intel (Concierge) | US / EU | Hashed identifiers only | Apr 2026 |
| Google CSE / Vision | SERP API + face match (Concierge) | US / EU | Embeddings + queries | Apr 2026 |
| Bing Web Search | SERP cross-check | US / EU | Queries | Apr 2026 |
| SerpAPI | SERP tertiary fallback | US | Queries | Apr 2026 |
| Yandex Images | Image reverse search (Concierge) | Russia | Embeddings only, opt-in | Apr 2026 |
| Cloudflare | CDN and DDoS protection | Global | Transit only | Apr 2026 |
| India Post / Speed Post | Postal legal notices when required | India | Recipient address only | Apr 2026 |