Trust Center
Subprocessors
Last updated: July 2026
The vetted service providers that help Cossmic deliver the platform. Each processes personal data only to provide its service to us, under contractual data-protection terms.
Current subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication & file storage | India (AWS ap-south-1) |
| Vercel | Application hosting & compute | India (bom1) |
| ZeptoMail (Zoho) | Transactional & notification email | India |
| Razorpay | Payment processing (PCI-DSS; no card data stored by Cossmic) | India |
| Sentry | Error monitoring (PII-scrubbed — fingerprints only) | PII-scrubbed |
| Google (optional) | Calendar & Gmail sync — only if the customer connects it | Global |
Changes to this list
We will give customers at least 30 days' notice before adding a new subprocessor that processes personal data, so you have the opportunity to review it. Each subprocessor is bound to data-protection terms consistent with the commitments we make to you.
Contact
Questions about a subprocessor, or to be notified of changes: privacy@cossmic.in.