1. About This List
A sub-processor is a third party we engage that processes personal data on our behalf in order to deliver Autometa CRM. This page is the authoritative list referenced by our Data Processing Addendum and Privacy Policy.
Each sub-processor is engaged under terms requiring confidentiality, appropriate security measures, and processing limited to our instructions.
2. Current Sub-processors
| Provider | Purpose | Processing Region |
|---|---|---|
| Amazon Web Services | Object storage (uploads, call recordings, data exports) and content delivery | India (ap-south-1); CloudFront edge locations globally |
| Razorpay Software Private Limited | Subscription and credit payments, refunds and dispute handling | India |
| Resend | Transactional email delivery (verification codes, notifications, reports) | United States |
| SMTP provider | Delivery of email sent by customer-configured automations | [[SMTP PROVIDER NAME AND REGION]] |
| OpenAI | Text generation, summarisation and speech-to-text transcription | United States |
| Anthropic | Text generation and reasoning features | United States |
| Google (Gemini) | Text generation and transcription features | United States |
| OpenRouter | Routing layer providing access to additional language models | United States |
| DeepSeek | Text generation for selected model tiers | Outside India |
| Groq | Low-latency inference for selected model tiers | United States |
| fal.ai | Image generation for marketing and social features | United States |
| LangSmith (LangChain) | Optional AI tracing for debugging. Disabled by default; when enabled it receives prompts and completions | United States |
| Firecrawl | Web page retrieval for research features | United States |
| Plivo | Voice calling, call recording and phone number provisioning | United States / India |
| Meta Platforms | WhatsApp Business Platform, Instagram and Facebook messaging and advertising APIs, where a customer connects those channels | United States |
| Google Firebase Cloud Messaging | Push notification delivery to browsers and mobile devices | United States |
| Sentry | Error and performance monitoring, including sampled session replay with text masked and media blocked | United States |
| Google reCAPTCHA | Bot protection on sign-up and login | United States |
| Cloudflare | Turnstile bot protection on public lead-capture forms | Global |
| Infisical | Secrets management for our own infrastructure credentials. Does not receive customer personal data | United States |
| Brandfetch | Company logo lookup and display | European Union |
| Mapbox | Map rendering and address features | United States |
| LocationIQ | Address lookup and geocoding | United States |
Our application, database and cache run on infrastructure we operate directly rather than on a managed database provider.
3. Customer-Connected Services
Customers can connect their own third-party accounts to their workspace — among them Google Workspace, Microsoft 365, Slack, Zoom, Shopify, WooCommerce, Twilio, Stripe, Mailchimp, Dropbox and advertising platforms.
These are not our sub-processors. The relationship is between the customer and that provider, under the provider’s own terms, using credentials the customer supplies. We transmit data to them only because, and to the extent that, the customer has instructed us to.
4. Notice of Changes
We will give at least 30 days’ notice before a new sub-processor begins processing personal data, by updating this page and notifying customers by email or in-product notice.
A customer may object on reasonable data-protection grounds within that period by writing to privacy@autometa.in. We will work in good faith to offer an alternative; where none is available, the customer may terminate the affected part of the Services and receive a refund of any prepaid fees for the unused remainder of the term.
To be notified of changes to this page, email privacy@autometa.in asking to be added to the sub-processor notification list.