Legal
Sub-processors
Last updated June 26, 2026
To deliver the Captivar service, Paramount Tech Network OPC Private Limited engages the third-party service providers ("sub-processors") listed below. Each sub-processor is bound by a Data Processing Agreement requiring confidentiality and GDPR-compliant data protection. We notify customers in advance of material changes via email and on this page.
Customers entitled to subscribe to advance notification of sub-processor changes may do so by emailing [email protected].
| Sub-processor | Role | Country | Transfer mechanism |
|---|---|---|---|
| Hostinger International Ltd | Production servers, databases, application hosting | Germany (Frankfurt) | EEA — no transfer |
| Cloudflare, Inc. | CDN, DNS, TLS, DDoS protection, WAF | United States (global edge) | EU-US DPF + SCCs |
| Backblaze, Inc. (B2) | Encrypted backup storage | United States | Standard Contractual Clauses |
| Functional Software, Inc. (Sentry) | Application error monitoring (technical metadata only) | Germany (Frankfurt, EU region) | EEA — no transfer |
| Anthropic, PBC | AI inference for the AI Receptionist feature | United States | Standard Contractual Clauses; zero retention for training under commercial terms |
| Zoom Video Communications, Inc. | Video meetings created on a customer’s behalf | United States | EU-US Data Privacy Framework |
| Google LLC (Google Meet) | Video meetings created on a customer’s behalf | United States | EU-US Data Privacy Framework |
| Google LLC (Google Fonts) | Web fonts on marketing site | United States | EU-US DPF · planned migration to self-hosted fonts in Q3 2026 |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | Payment processing | Luxembourg (with US parent) | EU-US DPF + SCCs |
| Resend, Inc. | Transactional email delivery | United States | Standard Contractual Clauses |
| ipify.org | Visitor IP geolocation lookup | United States | Standard Contractual Clauses · planned migration to self-hosted GeoIP database in Q3 2026 |
| UptimeRobot Service Provider Ltd | Uptime monitoring | Malta (EEA) | EEA — no transfer |
Notes
- —"SCCs" refers to the Standard Contractual Clauses adopted by the European Commission in Decision 2021/914.
- —"EU-US DPF" refers to the EU-US Data Privacy Framework. Each listed sub-processor maintaining DPF certification is publicly listed on dataprivacyframework.gov.
- —Paramount's founding administrator accesses production systems from India for operational purposes. This access is subject to SCCs (Module 3) and the security measures described in our DPA.
Change log
- —June 26, 2026 — Initial publication.
Questions or sub-processor change-notification subscription requests: [email protected]