TRUST CENTER

The third parties behind your data

Below is the current list of third parties that process customer personal data on behalf of TANQORY PTE. LTD. and its affiliates. Each entry is contractually bound by a Data Processing Agreement and is reviewed on a recurring cycle.

Email DPO View regions

Subprocessors by category

Subprocessors are grouped by primary function so procurement and DPO teams can locate the entries relevant to a specific assessment quickly. Every row here is publicly disclosable and currently wired in production — entries gated by NDA are excluded.

Infrastructure

Name	Purpose	Location	Transfer mechanism
DigitalOcean, LLC	Primary cloud hosting: Kubernetes (DOKS), Managed PostgreSQL, Managed Valkey/Redis, Spaces (S3-compatible), Container Registry	Singapore (SGP1)	Singapore-based processing; no cross-border transfer for PROD
Cloudflare, Inc.	DNS, CDN, WAF, DDoS protection, R2 object storage, Workers, API Shield, Turnstile (anti-bot challenge service)	Global edge network	SCC (Module 3 sub-processor) + UK IDTA + Swiss adequacy addendum
MongoDB, Inc.	Vector search and document storage for the AI service (ai-api)	AWS ap-southeast-1 Singapore	Same-region; SCC if expanded
Amazon Web Services, Inc.	S3 bucket for theme asset storage; demo/roadmap multi-cloud overlay	ap-southeast-1	Same-region

Payments

Name	Purpose	Location	Transfer mechanism
Stripe, Inc. (primary, United States) / Stripe Payments Singapore Pte. Ltd. (regional, retained for future regional use)	Platform subscription billing + merchant payments via Stripe Connect	Global Stripe infrastructure	SCC + Stripe US DPA (primary) + Singapore PDPA-compliant DPA (legacy SG account)
PayPal Holdings, Inc.	Platform billing payment method + merchant payments (PayPal Connect)	Global PayPal infrastructure	—
Braintree, a service of PayPal, Inc.	Merchant-side payment adapter (PayPal subsidiary)	Global	—

AI

Name	Purpose	Location	Transfer mechanism
OpenAI, L.L.C.	LLM inference (gpt-4o, gpt-4o-mini) + embeddings (text-embedding-3-small) + image generation	United States	SCC + DPA; zero data retention enterprise tier requested
Anthropic, PBC	LLM inference (Claude family) — selectable provider	United States	SCC + DPA
DeepSeek (Hangzhou DeepSeek AI Co., Ltd.)	Alternative LLM provider (selectable)	People's Republic of China	REQUIRES separate review — China data-transfer regime applies
Google LLC (Google Cloud)	Gemini TTS for tanqory-voice; on-device Gemini Nano on Android	United States	SCC + Google Cloud DPA
Apple Inc.	On-device LLM via FoundationModels framework (iOS 26+)	On-device	—

Communications

Name	Purpose	Location	Transfer mechanism
Twilio SendGrid (Twilio Inc.)	Transactional email (account, billing, magic links, password reset)	United States	SCC + Twilio DPA
Resend, Inc.	Secondary transactional email transport	United States	—
Vonage Holdings Corp.	SMS for MFA + transactional SMS	Global	SCC
Google LLC (Firebase Cloud Messaging)	Push notifications to Android merchant app	United States / Global	—
Apple Inc. (APNs)	Push notifications to iOS merchant app	United States / Global	—

Observability

Name	Purpose	Location	Transfer mechanism
Functional Software, Inc. (dba Sentry)	Error tracking + performance monitoring (backend + frontend + mobile)	United States (with EU region option)	SCC + Sentry DPA

Productivity

Name	Purpose	Location	Transfer mechanism
Liveblocks Inc.	Real-time collaboration in admin + store apps	United States	—
Canva Pty Ltd	Embedded design tools (admin integrations)	Australia / Global	—

Source: subprocessors source of truth, effective 2026-05-28 (v1.2). Reviewed continuously.

How we notify you of changes

Customers with executed Data Processing Agreements receive notice of new subprocessors in line with their DPA. Material changes to this list — adding a new subprocessor that processes personal data, or changing a subprocessor's location or category — are published here and notified via the contact path defined in your DPA. If you need to be added to a subprocessor-update mailing list, or if you have an objection right under your DPA, write to dpo@tanqory.com.

Contact the DPO

Common questions about our subprocessors

Are all subprocessors covered by a signed DPA?

Yes. Every entry on this page is bound by a Data Processing Agreement (or equivalent terms) with TANQORY PTE. LTD., including international-transfer safeguards where applicable (Standard Contractual Clauses, UK IDTA, Swiss adequacy addendum, or recognised adequacy decisions).

How often is this list updated?

The list is reviewed continuously by our Trust team. The dataset behind this page (01-subprocessors.yaml) is versioned and the page reflects the current published version on every build and ISR revalidation.

Are non-public subprocessors hidden?

Yes. Subprocessors with disclosure set to non-public, or which are not yet wired in production, are excluded from this list by design. They appear in customer-facing disclosures only after they meet both criteria.

Can I object to a specific subprocessor?

Customers with an executed DPA generally have an objection right defined in their contract. To exercise it, contact dpo@tanqory.com referencing your account and the subprocessor in question.

Where can I find your AI subprocessors and training opt-outs?

AI subprocessors are listed in their own category. Where the upstream provider supports it, Tanqory has elected workspace-level training opt-out on customer-data inputs. Specific opt-out status per provider can be requested from trust@tanqory.com.

Need our current DPA template?

Request our DPA, subprocessor-update mailing list opt-in, or a subprocessor briefing from our Data Protection Officer.

Email the DPO