Authorized Subprocessor Directory
Official Inventory of Third-Party Infrastructure, Database, Cloud AI, and Communications Vendors
1. Subprocessor Governance Framework
Tech Potentia utilizes vetted third-party vendors ("Subprocessors") to deliver scalable cloud compute, encrypted database storage, transactional communications, and payment gateways. Every subprocessor undergoes rigorous information security evaluations and is bound by executed Data Processing Addenda ensuring compliance with the Digital Personal Data Protection Act, 2023.
2. Active Production Subprocessors
| Provider | Purpose / Role | Personal Data Processed | Location / Region | Security Compliance |
|---|---|---|---|---|
| Google Cloud Platform (GCP) | Core cloud infrastructure, managed databases, secure container hosting, and Vertex AI APIs. | Encrypted application databases, user account metadata, session records, and transient AI audio processing. | India (Mumbai / Delhi) & Global | ISO 27001, SOC 1/2/3, PCI-DSS, HIPAA-eligible |
| Vercel Inc. | Serverless web application hosting, automated CI/CD deployments, and global CDN edge routing. | Edge request telemetry, IP addresses, temporary session headers, and cached static assets. | Global Edge Network (including India Edge Nodes) | SOC 2 Type II, ISO 27001 |
| Razorpay Software Private Limited | Digital subscription billing, payment gateway checkout, and statutory tax invoice generation. | Billing contact details, transaction IDs, tax identifiers (GST), and payment session tokens (zero raw card storage on Tech Potentia). | India | PCI-DSS Level 1, RBI Authorized, ISO 27001 |
| Resend Technologies Inc. | Transactional email infrastructure (waitlist priority notifications, account verification, alerts). | User recipient email addresses, names, and transactional message content. | United States / Global | SOC 2 Type II, GDPR / DPDP DPA |
| Google Workspace (Alphabet Inc.) | Business correspondence, customer support communications, and administrative spreadsheets. | Inbound customer emails, consultation RFQ notes, and waitlist backups. | India / Global | ISO 27001, SOC 2/3, GDPR / DPDP DPA |
3. Updates & Institutional Notification
We update this directory prior to onboarding any new subprocessor. Institutional clients with an active Data Processing Addendum may subscribe to subprocessor notifications by emailing [email protected] and retain the contractual right to raise reasonable data protection objections within thirty (30) calendar days.