Sub-processor List
Conwerz AI engages the sub-processors below to deliver the Service. Each vendor is bound by a Data Processing Agreement that requires equivalent or stronger security and privacy commitments than our own. We notify Business Admins at least 30 days before adding a new sub-processor by email and via this page.
| Vendor | Purpose | Data categories | Location | DPA |
|---|---|---|---|---|
| Microsoft Azure | Primary cloud hosting, object storage, key management. | All platform data (at rest, encrypted). | Central India / Southeast Asia | Link |
| Amazon Web Services | Secondary hosting for specific regions and disaster-recovery backups. | Encrypted backups. | Mumbai (ap-south-1) | Link |
| Meta Platforms, Inc. | WhatsApp Business, Instagram, Facebook Pages, and Lead Ads APIs. | OAuth tokens, messages, leads — processed via Graph API. | United States / global | Link |
| OpenAI | LLM inference for chatbot replies (when configured). | Conversation context sent at inference time. Zero-retention mode. | United States | Link |
| Anthropic | LLM inference for chatbot replies (when configured). | Conversation context sent at inference time. Zero-retention mode. | United States | Link |
| Google Firebase | Authentication (ID-token issuance and verification). | Email, UID, sign-in metadata. | United States / global | Link |
| Razorpay | Subscription billing and payment processing. | Name, email, billing address, transaction IDs. Card data never touches Conwerz. | India | Link |
| Managed MySQL (Azure Database for MySQL) | Primary relational datastore. | All structured platform data, encrypted. | Central India | Link |
| Milvus (self-hosted) | Vector database for knowledge-base embeddings. | Document embeddings and source text chunks. | Same region as primary host. | Same as hosting provider. |
| Google Analytics 4 | Website traffic analytics on conwerz.ai (marketing site only). | Anonymised usage metrics, IP-truncated. | United States / global | Link |
International Transfers
Where a sub-processor is outside India or the EU, transfers rely on Standard Contractual Clauses, adequacy decisions, or the sub-processor's equivalent safeguards. Business Admins with EU end-customers can request our SCC package at privacy@conwerz.ai.
Change Notifications
We maintain a version history of this page. To subscribe to sub-processor change alerts, email privacy@conwerz.ai with the subject "subscribe sub-processor updates".