Sub-processors
The full list of providers that touch your data.
Every infrastructure or service provider that processes TatvaCRM customer data is listed below with what they do, what categories of data they see, and where they process it. This page is referenced in our Data Processing Addendum. We email all customers 30 days before adding, removing or replacing any provider.
30-day change notice
DPA-referenced
India-hosted (Mumbai) on every plan
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| AWS RDS (PostgreSQL) | Primary database (managed PostgreSQL) | All CRM records (contacts, deals, tasks, files metadata) | ap-south-1 (Mumbai) |
| Backblaze B2 | File & attachment storage (S3-compatible) | User-uploaded files & attachments | EU / US |
| AWS ElastiCache (Redis) | Redis cache & queue | Ephemeral session data, job queues, rate-limit counters | ap-south-1 (Mumbai) |
| Resend | Transactional email | Recipient address, subject, message body for system emails | EU |
| AWS SES | Bulk outbound email & domain mail | Sender domain, recipients, message content | ap-south-1 (Mumbai) |
| Vercel | Web app & marketing site hosting | HTTP request logs, build artefacts | Global edge |
| AWS ECS Fargate | API & worker hosting | Application logs, runtime metrics | ap-south-1 (Mumbai) |
| Cloudflare | DNS, CDN, DDoS protection, WAF | Traffic metadata, IP addresses, request headers | Global edge |
| Sentry | Error monitoring & performance tracing | Error stack traces, user IDs (no PII payloads) | EU |
| Plausible | Privacy-respecting site analytics (marketing site only) | Page path, referrer, anonymised device class | EU |
Last updated · 15 August 2026