Draft for legal review. This text is a working template and is not yet the final agreement.
Sub-processors
Legal CRM · version 2026-10
Service providers that may process personal data on our behalf to run the service. We give customers 30 days’ notice before adding one.
| Purpose | Provider | Location | What they do |
|---|---|---|---|
| Hosting and database | Oracle Cloud Infrastructure (or the provider named at go-live) | India (Mumbai) | Runs the application, database, file storage and backups |
| WhatsApp messaging | Meta Platforms (WhatsApp Business Platform) | Global | Delivers messages between the Firm and its clients |
| AI assistance (optional) | Microsoft Azure AI Foundry | Azure region chosen at go-live | Summaries, extraction, translation, drafts; only when the Firm turns AI on; Aadhaar and PAN removed first; not used for training |
| Resend | United States | Sign-in, alert and invoice emails to the Firm’s users; no client content | |
| Bot protection | Cloudflare Turnstile | Global | Checks sign-up and password-reset forms are used by people |