Sub-processors
The full list of providers that touch your data.
Every infrastructure or service provider that processes TatvaCRM customer data is listed below with what they do, what categories of data they see, and where they process it. This page is referenced in our Data Processing Addendum. We email all customers 30 days before adding, removing or replacing any provider.
30-day change noticeDPA-referencedIndia-region option on Business tier
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Neon | Primary database (managed PostgreSQL) | All CRM records (contacts, deals, tasks, files metadata) | Singapore (default) · Mumbai available on Business tier |
| Backblaze B2 | File & attachment storage (S3-compatible) | User-uploaded files & attachments | EU / US |
| Upstash | Redis cache & queue | Ephemeral session data, job queues, rate-limit counters | Singapore |
| Resend | Transactional email | Recipient address, subject, message body for system emails | EU |
| AWS SES | Bulk outbound email & domain mail | Sender domain, recipients, message content | ap-south-1 (Mumbai) |
| Vercel | Web app & marketing site hosting | HTTP request logs, build artefacts | Global edge |
| Railway | API & worker hosting | Application logs, runtime metrics | Singapore |
| Cloudflare | DNS, CDN, DDoS protection, WAF | Traffic metadata, IP addresses, request headers | Global edge |
| Sentry | Error monitoring & performance tracing | Error stack traces, user IDs (no PII payloads) | EU |
| Plausible | Privacy-respecting site analytics (marketing site only) | Page path, referrer, anonymised device class | EU |
Last updated · 10 May 2026