1. Current sub-processors
We do not sell, rent, or trade your personal data. Personal data is shared only with the sub-processors listed below, who are contractually bound to process data solely for the purpose of delivering the Service and subject to obligations no less protective than those in our Privacy Policy.
| Sub-Processor | Role | Location | Transfer Safeguard |
|---|---|---|---|
| Hostinger (UAB) | Primary infrastructure hosting and VPS services | Lithuania (EU) / Mumbai, India | EU entity; SCCs where applicable |
| Cloudflare, Inc. | Encrypted database backup storage | India / EU region (configured) | Cloudflare DPA + SCCs |
| Google LLC | Third-party authentication provider | US (global CDN) | Google DPA; SCCs |
| GitHub, Inc. (Microsoft) | Third-party authentication provider | US (global CDN) | GitHub DPA; SCCs |
2. Changes to this list
We will notify you at least 14 days in advance of any sub-processor changes, giving you the opportunity to object in writing. Under our Terms and Conditions, the Client grants general written authorisation for Cipherion to engage the sub-processors as listed.
As Additional Modules and AI Features are introduced, any new sub-processors required to deliver them will be added to this list with fourteen (14) days' advance notice to Clients.
Questions about this list can be sent to official@cipherion.in.
3. International data transfers
Our primary infrastructure and database are located in Mumbai, India. Encrypted backups are stored with approved sub-processors configured to retain data within India and approved EU regions. Authentication flows may transit the globally distributed infrastructure of Google or GitHub.
- EU/EEA and UK clients: Standard Contractual Clauses (SCCs) approved by the European Commission, and UK International Data Transfer Agreements (IDTAs) where applicable, are in place with relevant sub-processors.
- Indian clients (DPDP): Cross-border transfers are conducted in accordance with applicable restrictions under the DPDP Act, 2023.
- All other jurisdictions: We rely on adequacy decisions or appropriate contractual safeguards as applicable to the client's jurisdiction.
4. Related documents
This list appears in Section 7 (Data Sharing & Sub-Processors) of the Privacy Policy and in Section 14.5 (Sub-Processors) of the Terms and Conditions.