Draft pending legal review
This document reflects how TrustShot is built and operated, and is being reviewed by counsel before general availability. Highlighted items are details still to be confirmed. Questions: contact@trustshot.in
1.Current sub-processors
| Provider | Purpose | Personal data | Location |
|---|---|---|---|
| Amazon Web Services | Application hosting, file storage for uploaded documents, backups | All service data, including Customer Content and account data | India (Mumbai region) |
| MongoDB Atlas (MongoDB, Inc.) | Managed database | Account data, Trust Center configuration, signup and consent records, access logs | India (Mumbai region, on AWS) |
| Cloudflare, Inc. | Website delivery, DNS, TLS, protection against bots and attacks | IP address and request metadata of website visitors; content in transit | Global edge network; nearest location to each visitor |
| Brevo (Sendinblue SAS) | Delivery of transactional email: verification codes, approvals, notices | Recipient name and email address, message content | European Union |
| MSG91 (Walkover Web Solutions Pvt. Ltd.) | SMS delivery of mobile verification codes | Mobile number, one-time code | India |
| Razorpay Software Pvt. Ltd. | Payment processing for paid plans | Billing contact and payment details (collected directly by Razorpay) | India |
Customer Content, including restricted documents, is stored only with the India-hosted providers above. Providers outside India receive only what the row describes.
2.Changes to this list
We give customers at least 30 days’ notice by email before adding or replacing a sub-processor, and update this page at the same time. Customers may object as described in the Data Processing Addendum. To be notified, email contact@trustshot.in with the subject “Sub-processor updates”.
3.What is not on this list
We do not use advertising networks, data brokers or third-party analytics that profile individuals. Our own staff and contractors are bound by confidentiality and are not listed as sub-processors.