Sub-processors
Last updated: June 2026
Vendors we rely on
We engage the following sub-processors strictly to provide Taxrithm. We require each to protect your data under contract.
| Sub-processor | Purpose | Data involved | Region |
|---|---|---|---|
| Supabase | Postgres database, Auth, file Storage (RLS-scoped) | All return data (PAN column-encrypted), client PII, uploads | Pune, India |
| Anthropic (Claude) | Form 16 PDF parsing (vision); regime advice on anonymised numbers | Form 16 PDF on the parse path (named sub-processor); anonymised figures only for advice | United States |
| Vercel | Application hosting + scheduled jobs | Request metadata; functions pinned to Mumbai, no PII persisted at this layer | Mumbai (bom1) |
| Resend | Transactional email (verification, notices) | Email address, name | See vendor DPA |
| Razorpay | Payments (INR) | Payment + contact metadata (no tax data) | India |
| Sentry | Error monitoring | PII-scrubbed error events (no PAN / Aadhaar) | European Union |
| PostHog | Product analytics (cookieless, consent-gated) | Anonymised event data; no PII | European Union |
Changes
We will update this page before engaging a new sub-processor that handles personal data. See our Privacy Notice for how we handle your data overall.