Third-Party Data Processors & Infrastructure
Version: 1.0
•
Effective: 2 September 2026
•
Last Updated: 2 September 2026
Sub-processors & Vendor Directory
This directory provides a transparent disclosure of the third-party service providers ("Sub-processors") engaged by ARZAQ INSIGHTS to process customer data and support our centralized cloud operations.
Data Protection & Vetting Standard:
All engaged sub-processors are evaluated for strict data security standards, ISO/IEC 27001 compliance, SOC 2 alignment, and are bound by Data Processing Addendums (DPAs) consistent with the DPDP Act 2023 and GDPR.
1. Cloud Hosting & Database Infrastructure
Primary cloud hosting, data storage, database clusters, and networking.
| Entity Name | Activity Performed | Data Processing Location |
|---|---|---|
| Amazon Web Services (AWS) | Central application hosting, Aurora MySQL databases, S3 object storage, backups | Mumbai (ap-south-1), India |
2. Payment Gateways & Banking Partners
Licensed financial gateways processing credit cards, UPI, net banking, and refunds.
| Entity Name | Activity Performed | Processing Location |
|---|---|---|
| PayU Payments Pvt Ltd | Payment authorization, recurring subscriptions, PCI-DSS tokenization | India |
| Razorpay Software Pvt Ltd | Payment processing, UPI Autopay, invoicing, customer payment links | India |
| Cashfree Payments India Pvt Ltd | Payment gateway services, instant settlement routing, refunds | India |
| PhonePe Pvt Ltd | UPI QR checkout, payment verification, direct wallet integration | India |
3. Transactional Communications & OTP Relays
Delivery of security OTPs, password reset links, verification codes, and invoices.
| Entity Name | Activity Performed | Processing Location |
|---|---|---|
| Amazon Simple Email Service (SES) | Transactional email delivery, password recovery emails, billing receipts | Mumbai, India |
| SMS & Telephony Carriers | Two-factor authentication (2FA) SMS delivery, phone verification OTPs | India |
4. Sub-processor Updates & Notifications
We review and update this Sub-processor Directory whenever new third-party entities are onboarded. Significant additions involving customer personal data are notified in advance through policy changelogs.
Vendor Compliance Office
ARZAQ INSIGHTS, D Block, New Ashok Nagar, Delhi 110096, India
Compliance Inquiries: support@arzaqinsights.com