Last updated: May 10, 2026
Subprocessors
BreakNCo Global Private Limited engages the following third-party subprocessors to process personal data on behalf of our customers. Each subprocessor is engaged under a data processing agreement that includes appropriate contractual, security, and confidentiality obligations.
Stay informed of changes
We provide 30 days' advance notice before adding or replacing a subprocessor.
Current Subprocessors
| Subprocessor | Purpose | Data transmitted | Location |
|---|---|---|---|
| Vercel, Inc. | Frontend hosting + serverless compute | Request metadata, server logs | Mumbai, India (AWS ap-south-1); static assets on global CDN |
| Supabase, Inc. | PostgreSQL database | All application data | Mumbai, India (ap-south-1) |
| Google Cloud Platform | Proprietary agentic AI infrastructure (BreakNCo-operated) | User prompts, org context, compliance content | India, GCP asia-south1 (Mumbai) |
| OpenAI, Inc. | Large language model inference | User prompts, org context, compliance content | USA (eval/fine-tuning & data sharing disabled) |
| Amazon Web Services | File/evidence storage (S3); self-hosted billing infrastructure | Evidence files; org name/ID and billing triggers | India (ap-south-1) |
| Upstash, Inc. | Redis caching and rate limiting | Session keys, rate-limit counters (no PII) | USA |
| Trigger.dev | Background job processing | Job payloads (org_id, entity refs) | USA/EU |
| Resend, Inc. | Transactional email | Recipient email address, notification content | USA |
| PostHog, Inc. | Product analytics and session recording | org_id, user_id, event names, session replay | USA/EU |
| Google LLC | OAuth authentication, Google Analytics 4, Google Tag Manager, Google Ads conversions | Auth tokens; website analytics; conversion events | USA |
| LinkedIn (Microsoft) | LinkedIn Insight Tag and Conversions API | Website visitor events, conversion data | USA |
| Browserbase, Inc. | Browser automation for evidence collection | URLs and page content for evidence tasks | USA |
| Firecrawl (Mendable, Inc.) | Web scraping for vendor research | Vendor website content | USA |
| Dub.co | Referral link analytics | Referral click events | USA |
| Zoho Corporation | Customer support (Zoho Desk) | Support ticket content, contact details | India (Zoho India datacenters) |
Data Residency Summary
India
All primary workloads
Vercel (Mumbai), AWS (ap-south-1), GCP (asia-south1), Supabase PostgreSQL (ap-south-1), Zoho (India)
USA
Ancillary services
AI inference (OpenAI), analytics, email, background jobs. Each covered by DPA.
Change History
| Date | Change | Subprocessor |
|---|---|---|
| May 10, 2026 | Removed | Mava.app (customer support widget — replaced by Zoho Desk) |
| May 10, 2026 | Added | Zoho Corporation (Zoho Desk — customer support) |
Questions
For questions about our subprocessors or to request a copy of a specific data processing agreement, contact admin@packets.build. Enterprise customers can also raise subprocessor objections under the terms of our DPA.