Trust Center
Subprocessors
Last updated: July 2026
The vetted service providers that help Cossmic deliver the platform. Each processes personal data only to provide its service to us, under contractual data-protection terms.
Current subprocessors
| Provider | Purpose | Location | Data-protection terms |
|---|---|---|---|
| Supabase | Primary database, authentication and file storage | India (AWS ap-south-1, Mumbai) | Under standard DPA terms |
| Vercel | Application hosting & compute | India (bom1, Mumbai) | Under standard DPA terms |
| ZeptoMail (Zoho) | Transactional & notification email | India | Under standard DPA terms |
| Razorpay | Payment processing (PCI-DSS; no card data stored by Cossmic) | India | Under standard DPA terms |
| Sentry | Error monitoring — personal data scrubbed before transmission (fingerprints only) | United States (no personal data transmitted) | Under standard DPA terms |
| Calendar & Gmail sync — only if the customer connects it | Global | Under standard DPA terms |
Changes to this list
We will give customers at least 30 days' notice before adding a new subprocessor that processes personal data, so you have the opportunity to review it. Each subprocessor is bound to data-protection terms consistent with the commitments we make to you.
Contact
Questions about a subprocessor, or to be notified of changes: privacy@cossmic.in.