Trust
Sub-processors.
The third-party services that process Personal Data on behalf of Wizthinkers Private Limited (operating as Depra). Per our DPA, we give customers at least 14 days' notice before adding or replacing a sub-processor. To receive these notifications, email team@depra.ai with your account email.
| Sub-processor | Purpose | Processing location | Data categories |
|---|---|---|---|
| Amazon Web Services India Pvt. Ltd. ↗ | Primary cloud hosting, database, storage, queues - Mumbai region | India (ap-south-1, Mumbai) |
|
| Cloudflare, Inc. ↗ | CDN, DDoS protection, WAF, DNS | Global (with India edge PoPs) |
|
| OpenAI ↗ | Large language model inference (enterprise tier, zero data retention) | United States |
|
| Anthropic ↗ | Large language model inference (Claude API, enterprise tier) | United States |
|
| Deepgram ↗ | Speech-to-text (Nova-3) - zero retention, no training | United States |
|
| ElevenLabs ↗ | Text-to-speech voice synthesis - no input retention | United States |
|
| Meta Platforms Ireland Limited ↗ | WhatsApp Business Platform (Cloud API) - message delivery | Ireland / United States |
|
| Tata Communications Limited | Voice / SMS termination, SIP trunking | India (Mumbai) |
|
| Twilio Ireland Limited ↗ | Voice / SMS fallback termination, programmable voice | Ireland / United States |
|
| Exotel Techcom Pvt. Ltd. | Cloud telephony, IVR, call routing | India (Bengaluru) |
|
| Razorpay Software Pvt. Ltd. ↗ | Payment processing - Indian customers, subscription billing | India (Bengaluru) |
|
| Stripe ↗ | Payment processing - international customers | Ireland / United States |
|
| Mixpanel ↗ | Product analytics for the Depra dashboard (authorised users only) | United States |
|
| Sentry ↗ | Application error tracking (PII redaction enabled) | United States |
|
| Google LLC ↗ | Google Analytics 4 (anonymised IP), Google Workspace (team@depra.ai email) | United States / Ireland |
|
| Vanta ↗ | Compliance automation - SOC 2 evidence collection | United States |
|
| Slack Technologies, LLC ↗ | Internal employee communications (no customer Personal Data routed) | United States |
|
Customer-authorised integrations (not Depra sub-processors)
When you connect your own third-party accounts to Depra - Shopify, WooCommerce, Shiprocket, Delhivery, your Razorpay account, your CRM (Salesforce, HubSpot, Zoho), your helpdesk (Freshdesk, Zendesk, Intercom), your own telephony accounts - those vendors are independent controllers or processors of yours, not Depra sub-processors. We act solely as a technical conduit at your direction.
Review those vendors' own privacy notices and DPAs. Depra is not responsible for their data practices.
Notes on this list
- This is the canonical list. If a sub-processor is not on this page, it does not process customer Personal Data on our behalf.
- Primary processing happens in AWS Mumbai (ap-south-1). Cross-border transfers to non-Indian sub-processors are governed by EU Standard Contractual Clauses (Module 2 and Module 3), the UK International Data Transfer Addendum B1.0, and Section 16 of the DPDP Act.
- AI providers (OpenAI, Anthropic, Deepgram, ElevenLabs) operate on no-training enterprise tiers with zero or short-window (≤30-day) abuse-detection log retention. We do not authorise training on customer data with any AI provider.
- We give 14 days' advance notice before adding or replacing a sub-processor. To object on reasonable data-protection grounds, email team@depra.ai within the notice window.
See what 14 days
with Depra looks like.
The first revenue play - live. The second - in your roadmap. The third - already paying for itself.
No credit card. No long contract. Most brands see ROI before the first invoice.