Sub-processors
The full list of providers that touch your data.
Every infrastructure or service provider that processes TatvaCRM customer data is listed below with what they do, what categories of data they see, and where they process it. This page is referenced in our Data Processing Addendum. We email all customers 30 days before adding, removing or replacing any provider.
30-day change notice
DPA-referenced
India-hosted (Mumbai) on every plan
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| AWS RDS (PostgreSQL) | Primary database (managed PostgreSQL) | All CRM records (contacts, deals, tasks, files metadata) | ap-south-1 (Mumbai) |
| Backblaze B2 | File & attachment storage (S3-compatible) | User-uploaded files & attachments | EU / US |
| AWS ElastiCache (Redis) | Redis cache & queue | Ephemeral session data, job queues, rate-limit counters | ap-south-1 (Mumbai) |
| AWS SES | All outbound email (transactional, bulk and domain mail) | Recipient address, subject and message content | ap-south-1 (Mumbai) |
| AWS S3 + CloudFront | Marketing site hosting | HTTP request logs | Global edge (origin ap-south-1) |
| AWS ECS Fargate | API, worker, web app and admin hosting | Application logs, runtime metrics | ap-south-1 (Mumbai) |
| Cloudflare | DNS, CDN, DDoS protection, WAF | Traffic metadata, IP addresses, request headers | Global edge |
| Sentry | Error monitoring & performance tracing | Error stack traces, user IDs (no PII payloads) | EU |
| Plausible | Privacy-respecting site analytics (marketing site only) | Page path, referrer, anonymised device class | EU |
Last updated · 12 October 2026