DPDP Act 2023 & GDPR Art 28

Authorized Subprocessor Directory

Exhaustive register of third-party infrastructure and sub-service providers utilized by CompTrust Technologies India Pvt. Ltd.

Subprocessor Governance Commitment

In accordance with Section 8 of the DPDP Act 2023 and Article 28(2) of the GDPR, CompTrust engages subprocessors only under binding written contracts that enforce strict data protection safeguards, confidentiality requirements, and security measures no less protective than those applicable to CompTrust.

CompTrust provides all customers with at least thirty (30) days advance notice before engaging any new subprocessor or materially changing an existing subprocessor's processing scope.

Approved Subprocessors

Amazon Web Services (AWS)

Amazon Web Services India Private Limited / Amazon.com, Inc.

Mumbai, India (ap-south-1)
Processing Role

Core Cloud Infrastructure, Managed PostgreSQL (RDS) & S3 Storage

Transfer Mechanism

Domestic Sovereign Hosting (Zero Cross-Border Transfer)

Security Certifications:SOC 1/2/3ISO 27001PCI-DSS Level 1FIPS 140-2

Clerk Inc.

Clerk Inc.

United States & Global Edge
Processing Role

User Authentication, Enterprise SSO, Session Security & MFA Management

Transfer Mechanism

EU-US DPF & Standard Contractual Clauses (SCCs)

Security Certifications:SOC 2 Type IICCPA/GDPR Compliant

Razorpay

Razorpay Software Private Limited

Bengaluru, Karnataka, India
Processing Role

Payment Processing, Recurring Subscription Billing & GST Invoicing

Transfer Mechanism

Domestic Sovereign Indian Payment Gateway (RBI Regulated)

Security Certifications:PCI-DSS Level 1ISO 27001

Sentry

Functional Software, Inc.

United States
Processing Role

Application Error Monitoring & Diagnostic Telemetry (PII Scrubbed)

Transfer Mechanism

EU-US DPF & Standard Contractual Clauses (SCCs)

Security Certifications:SOC 2 Type IIISO 27001HIPAA

Render Services Inc.

Render Services Inc.

United States & Global
Processing Role

Container Compute Cloud Runtime & Managed Application Host

Transfer Mechanism

Standard Contractual Clauses (SCCs)

Security Certifications:SOC 2 Type IIISO 27001

Netlify Inc.

Netlify Inc.

Global Anycast Edge CDN
Processing Role

Static Frontend Application Edge Hosting & Consent SDK CDN Delivery

Transfer Mechanism

Standard Contractual Clauses (SCCs)

Security Certifications:SOC 2 Type IIISO 27001PCI-DSS

Subscribe to Subprocessor Updates

Register your legal or procurement email to receive 30-day advance notice of any planned subprocessor changes.

CompTrust Technologies India Private Limited • Subprocessor Management Office

For questions or DPA execution inquiries, contact legal@comptrust.app.