Third parties we engage to provide the service. We sign Data Processing Agreements (DPAs) with each. Material changes are announced before they take effect.
Current sub-processors
Mongo runs in a Docker container on our own AWS infrastructure (no Atlas). Vector search uses brute-force similarity in our FastAPI service, not a third-party vector DB.
| Processor | Purpose | Region | DPA |
|---|---|---|---|
| Amazon Web Services (AWS) | Hosting, Bedrock AI inference, Textract OCR, S3 storage, SES email, CloudFront CDN | ap-south-1 (Mumbai) | link |
| Cashfree Payments | Payment processing for INR plans (PCI-DSS Level 1) | India | link |
| Stripe | Payment processing for international plans (PCI-DSS Level 1) | Global (Stripe Ireland for EU; Stripe US for North America) | link |
| OAuth sign-in (Google Identity) | Global | link |
Change notice
Adding a new sub-processor that touches personal data triggers a 14-day notice on this page and an email to all active accounts. You may close your account before the change takes effect; refunds follow our refund policy.