Data Processing Transparency
Sub-processors
To deliver the evo7 platform we engage a small set of third-party service providers. This register lists each sub-processor, why we use it, the categories of personal data it may process, and where that processing happens.
Current Sub-processor Register
Last updated: 2026-08-14
| Sub-processor | Purpose | Data categories | Location | Status | Scope |
|---|---|---|---|---|---|
| Hostinger | Cloud hosting for all platform services and databases | All platform data, including account and contact details | India | Active | Platform-wide |
| Meta Platforms | WhatsApp Business, Facebook and Instagram messaging; Meta lead ads | Phone numbers, names, message content, lead details | United States (global) | Active | Per-organization integration |
| RCS / Business Messages and Ads lead forms (opt-in per organization), consent-gated website analytics (GA4), Gmail OAuth mail sync | Phone numbers, message content, lead details, mailbox tokens, pseudonymous analytics | United States (global) | Active | Platform-wide | |
| Microsoft | Outlook OAuth mailbox sync | Mailbox tokens and synced email content | United States (global) | Active | Per-organization integration |
| Cashfree Payments | Payment collection and payouts | Payer name, contact details, bank / UPI details | India | Inactive | Platform-wide |
| Cloudflare | Turnstile anti-abuse protection on forms and TLS/DNS services | IP addresses and browser signals | Global (anycast network) | Active | Platform-wide |
| Upstash | Website rate limiting | IP-derived request keys | United States | Under review | Platform-wide |
| Mapbox | Map rendering for proposals and solar designs | Customer site coordinates and addresses | United States | Active | Platform-wide |
| AWS (Amazon Bedrock) | Optional AI model fallback (not enabled) | Prompt content, which may contain personal data | India (ap-south-1) | Inactive | Platform-wide |
| Let's Encrypt | TLS certificate issuance | Administrator contact email only | United States | Active | Platform-wide |
Inactive vendors are configured but do not currently process production personal data; per-organization integrations only apply where a customer enables that channel. We notify customers of changes to this list in advance, in accordance with our data processing terms, and update the date shown above with every change. Questions? See our Privacy Policy or contact us.