Subprocessors
Third-party data processors we engage to deliver the service. This list is published in line with DPDP ยง5(8) and GDPR Art. 28. · Privacy Policy · Grievance Officer
| Subprocessor | Purpose | Jurisdiction | DPA |
|---|---|---|---|
| Anthropic, PBC | LLM-assisted features (anomaly explanations, natural-language reporting, forecast narratives). Receives operational summaries minimised by PiiEgressRedactor, which strips well-formed email/phone/Aadhaar/PAN identifiers before egress; free-text prompts may still contain member names, which are not stripped. | United States |
Not yet executed
|
| Cashfree Payments India Private Limited | Alternate payment gateway + payout rail. Receives member/order identifiers and transaction amounts for payment capture and settlement. | India |
Not yet executed
|
| CloudPe (infrastructure hosting — bare instances, self-managed) | Data-centre infrastructure hosting the application servers, database, blob storage, and disaster-recovery backups. We take bare instances and self-manage the operating system, patching, database hardening, backup execution and DR; the provider supplies the facilities, hardware, power and network. | India |
Not yet executed
|
| Easebuzz Private Limited | Alternate payment gateway. Receives member/order identifiers and transaction amounts for payment capture. | India |
Not yet executed
|
| Google LLC (Cloud Vision API) | Server-side validation of profile photos uploaded by members, where enabled. The image is sent only at the moment of validation. | United States |
Not yet executed
|
| Google LLC (Firebase Analytics / Crashlytics) | Mobile app stability + usage diagnostics (crash reports, aggregate feature usage). Receives device/app diagnostic data and a pseudonymous installation id. | United States |
Not yet executed
|
| Google LLC (Firebase Cloud Messaging / FCM) | Push-notification delivery. Receives a device installation token, platform, device model, and app version. | United States |
Not yet executed
|
| Grafana Labs, Inc. (Grafana Cloud) | Application observability — receives OpenTelemetry traces/spans and metrics over OTLP for performance monitoring and error diagnosis. Spans are PII/secret-scrubbed BEFORE export (URL tokens, key=value secrets, and bare email/phone/PAN/Aadhaar redacted by the in-process PiiScrubbingSpanProcessor), so member direct identifiers are not transmitted. | United States |
Not yet executed
|
| Gupshup Technology India Private Limited | Transactional SMS / WhatsApp message delivery. Receives member phone number and the message body (OTPs, order/wallet notices). | India |
Not yet executed
|
| Meta Platforms, Inc. (WhatsApp Business) | WhatsApp Business message delivery. Receives member phone number and templated message content. | United States |
Not yet executed
|
| Microsoft Azure (cloud hosting + backup) | Data-centre hosting of the application servers, database, blob storage, and DR backups. All payment-classified stores and DR targets are pinned to India regions. | India |
Not yet executed
|
| Razorpay Software Private Limited | Payment processing (UPI / cards / netbanking). Receives member name, email, phone, and transaction amount to render checkout and process payments. | India |
Not yet executed
|
| SMTP relay provider | Outgoing transactional email (welcome, password reset, notices). Receives member email address and the message body. Configured per operator. | India |
Not yet executed
|
| Twilio Inc. | Transactional SMS delivery fallback. Receives member phone number and message body. | United States |
Not yet executed
|
We update this list when we engage a new processor or change the scope of an existing one. For vendor-questionnaire requests, contact our Grievance Officer.