Vendor Management & GDPR
Authorized Subprocessors
GenAiGpt engages third-party entities ("Subprocessors") to assist in delivering our AI customer assistant platform. Every vendor undergoes rigorous security and privacy due diligence.
| Subprocessor | Role / Activity | Entity Location | Security Standards |
|---|---|---|---|
| Cloudflare, Inc. | Edge compute, CDN, DDoS protection & Web Application Firewall (WAF) | United States & Global Edge | SOC 2 Type II, ISO 27001 |
| Google LLC (Gemini AI / Vertex) | LLM text generation & embeddings. Zero customer data retention policy | United States / EU | SOC 1/2/3, ISO 27001, HIPAA |
| Razorpay Software Pvt. Ltd. | Payment processing, recurring e-mandates (Cards, UPI, NetBanking) | India | PCI-DSS Level 1, ISO 27001 |
| Amazon Web Services (AWS) | Encrypted file storage at rest and secure database backups | United States / APAC | SOC 2 Type II, ISO 27001, FedRAMP |
Need our Data Processing Agreement (DPA)?
We offer standard contractual clauses and signed DPAs for Enterprise customers requiring GDPR and international privacy compliance.