Legal

Sub-processors

Last updated: 25 May 2026

CloudSync Technologies LLC uses the sub-processors listed below to deliver the Probita service. We keep this list intentionally short and audit each sub-processor before engagement. We will update this page and notify customers by email at least 30 days before adding a new sub-processor that processes personal data.

AI providers status: Only Google Gemini is enabled today as the default AI provider for Probita Assistant Layer 2 summaries (audit / asset / exception). Anthropic, OpenAI and Azure OpenAI are roadmap providers — listed for transparency so customers know what may be activated next, but they are not in use until a tenant admin explicitly enables them in Settings → AI.

Sub-processor	Data location	Purpose	Data types
Amazon Web Services (AWS) Amazon Web Services, Inc. Privacy policy →	ap-south-1 (Mumbai, India)	Cloud infrastructure: compute, managed PostgreSQL database (RDS), object storage (S3), and transactional email delivery (SES).	All customer data (encrypted at rest)
Prisma (Prisma Data, Inc.) Prisma Data, Inc. Privacy policy →	United States	ORM framework used at build time and during database migrations. Prisma runs as a library inside our own infrastructure — no customer data is transmitted to Prisma servers.	None (build-time tooling only)
Google (Gemini API) Google LLC Privacy policy →	Mumbai region (asia-south1) where available	AI-generated summaries and chat (when enabled per tenant). Live today as the default AI provider for Probita Assistant Layer 2 summaries.	Per-request prompt content only when AI is enabled by the tenant admin
Anthropic (Claude API) Anthropic, PBC Privacy policy →	United States	Optional AI provider (when admin enables). Roadmap — not enabled today.	Per-request prompt content only when AI is enabled by the tenant admin
OpenAI (OpenAI API) OpenAI, L.L.C. Privacy policy →	United States	Optional AI provider (when admin enables). Roadmap — not enabled today.	Per-request prompt content only when AI is enabled by the tenant admin
Microsoft (Azure OpenAI) Microsoft Corporation Privacy policy →	Region-controlled by the tenant (e.g. UAE North, UK South)	Optional AI provider with region control (when admin enables). Roadmap — not enabled today.	Per-request prompt content only when AI is enabled by the tenant admin

Analytics & tracking

We do not use any third-party analytics, advertising networks, or behavioural tracking tools. Visitor and usage data is derived from our own server logs only and is not shared with any third party.

Change log

Date	Change
25 May 2026	Initial publication — AWS (ap-south-1) + Prisma (build-time)