Public register · updated 22 May 2026
Sub-processors
This register names the vendors and infrastructure categories that support PRAMAAN. It is intentionally separate from verification-result copy, where partner names remain hidden under SO-PR-2.
| Processor | Purpose | Data classes | Region | Role |
|---|---|---|---|---|
| Razorpay | UPI, card, invoice, refund, and payment-status processing. | payer phone or email, payment status, invoice metadata | India primary; PCI-controlled payment environment. | independent-controller |
| MSG91 | DLT-compliant OTP and transactional SMS delivery. | mobile number, OTP delivery metadata | India DLT route. | sub-processor |
| Gupshup | WhatsApp Business notifications and consent/result delivery. | mobile number, message template metadata | India business messaging route. | sub-processor |
| Cloudflare | DNS, CDN, TLS termination, bot management, and edge security. | IP address, request metadata, security telemetry | Global edge; India-origin protected. | sub-processor |
| Resend | Transactional email delivery for receipts, DSR, and support messages. | email address, delivery metadata, template variables | Global email delivery; India-origin event source. | sub-processor |
| OpenAI / OpenRouter | Limited AI orchestration for support, summarisation, and fraud-signal assistance with PII redaction controls. | redacted support context, non-secret operational metadata | No raw identity documents; redacted prompts only unless separately approved. | sub-processor |
| Self-hosted storage and database services | Encrypted India-region document, avatar, invoice, status, and audit evidence storage. | identity evidence, consent records, audit logs, invoices | India-hosted infrastructure controlled by TALPRO INDIA PRIVATE LIMITED. | processor |
Change notice
Material processor changes are reviewed for security, privacy, data residency, and DPA compatibility before production use. Enterprise customers may request written notice in their order form.