Subprocessors
Last updated: July 27, 2026
This is the authoritative list of subprocessors that Burdenoff Consultancy Services Pvt. Ltd. engages to process personal data in connection with the Service, referenced by our Privacy Policy and Data Processing Addendum. Each subprocessor is bound by a data-processing agreement (or equivalent contractual protection) requiring a level of data protection consistent with this Privacy Policy. We do not use a subprocessor to process personal data for any purpose other than providing, securing, or supporting the Service.
| Subprocessor | Category | Purpose | Processing region |
|---|---|---|---|
| Microsoft Azure | Cloud infrastructure | Primary cloud infrastructure — compute (Container Apps), managed Postgres, managed Redis, container registry, and secrets management | Central India (primary) |
| Amazon Web Services (S3 + CloudFront) | Cloud infrastructure / CDN | Static website and application-shell hosting and content delivery | Global (CDN edge), ap-south-1 (origin) |
| Cloudflare | CDN / network security | DNS, edge/CDN routing, Zero Trust access control for internal and pre-launch surfaces, and Workers used for edge routing on select properties | Global |
| Stripe | Payment processor | Payment processing for subscriptions and one-time purchases | Ireland / Global |
| Razorpay | Payment processor | Payment processing for subscriptions and one-time purchases (India) | India |
| GraphQL Hive (The Guild) | Developer infrastructure | Schema registry and API gateway configuration distribution. Receives our GraphQL schema definitions, not end-user personal data | Global (Cloud CDN) |
| GitHub (Microsoft) | Developer infrastructure | Source control and CI/CD pipeline execution for our own engineering | Global |
| Anthropic, OpenAI, and Google (model providers) | AI / ML provider | Underlying large-language-model inference for AI-assisted features where a specific product enables one, limited to the content you submit to that feature | Varies by provider (US / EU) |
Individual Burdenoff products may enable additional, product-specific integrations you explicitly connect (for example, a third-party calendar or storage provider). Those are disclosed in the product's own settings at the point you connect them and are not listed here, since you control whether they process your data.
Notice of New Subprocessors
Where we add a new subprocessor with access to personal data, we update this page and, for customers with a signed Enterprise Data Processing Agreement, provide at least 30 days' advance notice before the new subprocessor begins processing, consistent with the objection right described in that agreement.
Questions
Questions about a specific subprocessor or our data-transfer mechanisms: privacy@burdenoff.com
Last updated: July 27, 2026