Subprocessors
Engineering inventory of processors that may process personal data for Opseno. Cross-border transfers follow the DPDP Act Section 16 negative-list model (not SCCs as a legal basis). Signed DPAs are maintained by Legal. See also Legal centre and Privacy Notice.
| Vendor | Purpose | Region | Notes |
|---|---|---|---|
| Vercel | Application hosting, CDN, function logs | Multi-region (confirm per project) | Enabled for cloud deployments |
| PostgreSQL (Neon and/or self-hosted / VPS) | Primary database | India (intended primary database region, e.g. Noida / India cloud region when production is so configured) | Ops must verify live region matches intent (Noida / India) |
| Resend | Transactional email | Typically outside India when configured | Optional — RESEND_API_KEY |
| Razorpay | Payments | India-centric | Optional — RAZORPAY_* |
| Sentry | Error monitoring | Typically outside India when configured | Optional — SENTRY_DSN |
| OpenAI / Anthropic | Optional AI inference | Outside India when enabled | Optional AI modules only |
Questions: privacy@opseno.com. Full ops checklist: docs/DPDP-SUBPROCESSORS.md.