Subprocessors
Last updated: October 28, 2026
This is the authoritative list of subprocessors that Burdenoff Consultancy Services Pvt. Ltd. engages to process personal data in connection with the Service, referenced by our Privacy Policy and Data Processing Addendum. Each subprocessor is bound by a data-processing agreement (or equivalent contractual protection) requiring a level of data protection consistent with this Privacy Policy. We do not use a subprocessor to process personal data for any purpose other than providing, securing, or supporting the Service.
| Subprocessor | Category | Purpose | Processing region |
|---|---|---|---|
| Amazon Web Services | Cloud infrastructure / CDN | Primary cloud infrastructure — compute (EKS), managed Postgres, managed graph and cache, container registry, secrets management, object storage, and static site hosting and delivery | ap-south-1 (Mumbai, India); global CDN edge |
| Cloudflare | CDN / network security | DNS, edge/CDN routing, Zero Trust access control for internal and pre-launch surfaces, and Workers used for edge routing on select properties | Global |
| Stripe | Payment processor | Payment processing for subscriptions and one-time purchases | Ireland / Global |
| Razorpay | Payment processor | Payment processing for subscriptions and one-time purchases (India) | India |
| GraphQL Hive (The Guild) | Developer infrastructure | Schema registry and API gateway configuration distribution. Receives our GraphQL schema definitions, not end-user personal data | Global (Cloud CDN) |
| GitHub (Microsoft) | Developer infrastructure | Source control and CI/CD pipeline execution for our own engineering | Global |
| Anthropic, OpenAI, and Google (model providers) | AI / ML provider | Underlying large-language-model inference for AI-assisted features where a specific product enables one, limited to the content you submit to that feature | Varies by provider (US / EU) |
| OpenRouter (model routing) | AI / ML provider | Fallback routing of AI-assistant requests to an underlying model provider when the primary provider is unavailable, limited to the content you submit to that feature | United States; upstream model provider varies |
Individual Burdenoff products may enable additional, product-specific integrations you explicitly connect (for example, a third-party calendar or storage provider). Those are disclosed in the product's own settings at the point you connect them and are not listed here, since you control whether they process your data.
Notice of New Subprocessors
Where we add a new subprocessor with access to personal data, we update this page and, for customers with a signed Enterprise Data Processing Agreement, provide at least 30 days' advance notice before the new subprocessor begins processing, consistent with the objection right described in that agreement.
Questions
Questions about a specific subprocessor or our data-transfer mechanisms: privacy@burdenoff.com
Last updated: October 28, 2026