Trust
Subprocessors.
Every third-party service that processes any portion of your data on our behalf. Updated whenever we add, remove or change a subprocessor.
Last updated: 24 May 2026.
| Subprocessor | Purpose | Region | Criticality |
|---|---|---|---|
| Supabase | Database, authentication, file storage (shipping bill PDFs) | Mumbai (ap-south-1) | Primary |
| Vercel | Hosting for marketing site and dashboard | Singapore + Mumbai edge | Primary |
| Anthropic | HS classification AI | United States (zero-retention API) | Primary |
| Razorpay | Payment processing (INR subscriptions) | India | Primary |
| Resend | Transactional email | EU (Frankfurt) with edge presence | Primary |
| Gupshup | WhatsApp Business API for alerts | India | Primary |
| Upstash | Redis for rate limiting and queues | Mumbai | Operational |
| Cloudflare | CDN and WAF for marketing site | Mumbai POP first | Operational |
| Plausible | Privacy-friendly site analytics (no cookies) | Germany | Operational |
| Sentry | Error tracking and performance monitoring | EU | Operational |
We notify customers by email at least 14 days before adding or replacing a Primary subprocessor. Customers may object within the notice period, in which case we will work to migrate or, if migration is not feasible, allow cancellation with pro-rated refund.