Authorized Sub-processors
Last Updated: October 11, 2026 • Strict Minimal Sub-processor Architecture
To deliver our high-availability authentication, Digital Locker orchestration, and verification services, InfoSkills Technology Pvt. Ltd. engages a strictly audited and minimized set of third-party sub-processors. All entities are bound by written Data Processing Agreements (DPAs) requiring adherence to strict confidentiality, security standards, and statutory data protection obligations under the DPDP Act 2023 and GDPR.
Infrastructure & Service Sub-processors
Amazon Web Services (AWS)
Amazon Web Services India Pvt. Ltd.
Scope of Processing: Primary cloud infrastructure, managed PostgreSQL databases, Redis caching clusters, KMS encryption, and private S3 document storage.
Data Safeguards: In-country Processing (India Data Localization Compliant)
Cloudflare, Inc.
Cloudflare, Inc.
Scope of Processing: Edge network DNS routing, DDoS protection, Web Application Firewall (WAF), and SSL/TLS termination.
Data Safeguards: Standard Contractual Clauses (SCCs) & DPDP Act Data In-Transit Exemption
Razorpay Software Pvt. Ltd.
Razorpay Software Pvt. Ltd.
Scope of Processing: Payment gateway processing, recurring card & UPI AutoPay subscription tokenization, and tax invoice receipting.
Data Safeguards: PCI-DSS Level 1 In-country Processing (India)
Sub-processor Notification & Objections
Customers subscribed to Growth or Scale plans may subscribe to sub-processor change notifications by contacting privacy@authsetu.com. We provide at least thirty (30) days advance notice before engaging any new infrastructure sub-processor.