Subprocessors
At Asanify, we are committed to transparency and privacy. Below is a list of our current subprocessors — third-party service providers who may process personal data on our behalf in connection with the delivery of our products and services.
Each subprocessor is bound by strict contractual obligations and security standards, and we ensure they meet or exceed the data protection requirements applicable under laws such as the GDPR, India’s DPDP Act, and SOC 2.
Infrastructure & Hosting
| Subprocessor | Purpose | Location | Retention |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting (app, DB, media) | Global | As per internal retention policy |
| AWS S3 | File and media storage | Global | 1 year after client contract termination |
Communication & CRM
| Subprocessor | Purpose | Location | Retention |
|---|---|---|---|
| Intercom | Customer support chat and ticketing | USA | Up to 10 years (email logs) |
| Customer.io | Transactional and marketing emails | USA | Until opt-out or contract end |
| HubSpot | CRM & marketing automation | USA | Until opt-out or request to delete |
Billing & Invoicing
| Subprocessor | Purpose | Location | Retention |
|---|---|---|---|
| Zoho Billing | Subscription management and invoicing | India | As per statutory limits |
Analytics
| Subprocessor | Purpose | Location | Retention |
|---|---|---|---|
| Segment (Twilio) | Event tracking and customer data pipeline | USA | 1 year |
| Amplitude | Product usage analytics | USA | 1 year |
AI & LLM Providers
| Subprocessor | Purpose | Location | Retention | Notes |
|---|---|---|---|---|
| OpenAI (ChatGPT) | AI-powered data enrichment and query automation | USA | 30 days* | No training on client data; enterprise API used where applicable |
| Anthropic (Claude) | AI-powered HR and onboarding assistance | USA | 30 days* | Used for classification and task automation |
*Retention may vary based on API configuration. We aim to use zero-data retention modes wherever feasible.
Compliance & Security
-
All subprocessors are evaluated regularly for their security and compliance practices.
-
Asanify ensures that each subprocessor enters into a Data Processing Agreement (DPA) with equivalent obligations.
-
If you would like to be notified of changes to our subprocessor list, please email: dpo@asanify.com
Last updated: 24 June 2025