The trusted third parties we engage to deliver the services, the safeguards that govern them, and how to receive advance notice of changes.
July 2, 2026
August 1, 2026
4.0
This document is published by Fininvo, a trade name of Prashbi Global Services Pvt. Ltd., a company incorporated under the laws of India (CIN: U52100KA2020PTC133490), with its registered office at Tholons Tower, 346 HIG, 17th Cross Rd, Dollars Colony, R.M.V. 2nd Stage, Bengaluru, Karnataka 560094, India. References to "Fininvo", "we", "us", or "our" in this document refer to Prashbi Global Services Pvt. Ltd..
To deliver the services, Fininvo engages the sub-processors below to process personal data on behalf of our customers. A sub-processor is a third party that processes personal data contained in Customer Data in the course of providing part of the services to us. Each sub-processor is bound by a written data processing agreement imposing obligations no less protective than those in our own Data Processing Agreement, and processes personal data only to provide its service to us.
List last reviewed: July 2, 2026. This page constitutes Annex III of the Data Processing Agreement and is the authoritative, current list of Fininvo sub-processors.
Before engaging any sub-processor that will process personal data, we:
We remain fully responsible to you for our sub-processors' performance of their data protection obligations, as set out in the DPA.
| Sub-processor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Amazon Web Services (AWS) Amazon Web Services, Inc. and regional affiliates | Cloud hosting, compute, managed database (RDS), file storage (S3) | India (Mumbai) primary; other AWS regions as configured per tenant | DPA with SCCs; ISO 27001, SOC 2 certified provider |
| Microsoft Azure Microsoft Corporation and regional affiliates | Cloud hosting, compute, managed database and container infrastructure (used for platform environments and progressive migration) | India (Central India) primary; other Azure regions as configured | Microsoft Products and Services DPA with SCCs; ISO 27001, SOC 2 certified provider |
During any migration between cloud providers, both providers may process data concurrently for the affected environments. Customer-facing commitments in the DPA and Security page apply equally on both.
| Sub-processor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Razorpay Razorpay Software Private Limited | Payment processing and recurring billing (India), RBI e-mandate handling | India | DPA; PCI DSS Level 1 certified; RBI regulated |
| Stripe Stripe, Inc. and Stripe Payments Europe, Ltd. | Payment processing (outside India) | United States and EU | DPA with SCCs; PCI DSS Level 1 certified |
Card numbers are captured and stored by the payment gateways only. Fininvo does not store full card numbers or CVV codes.
| Sub-processor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Amazon SES Amazon Web Services, Inc. | Transactional and notification email delivery | India / United States | DPA with SCCs |
| WhatsApp Business Platform Meta Platforms, Inc., accessed through an authorised Business Solution Provider | Opt-in notification messages containing links only; document content such as payslips is never sent over WhatsApp | As operated by Meta and the Business Solution Provider | DPA and Meta WhatsApp Business terms; opt-in only |
| Google Sign-In Google LLC | Optional single sign-on (name, email address and profile picture only) | United States | Google data processing terms with SCCs |
| Sub-processor | Purpose | Location of Processing | Safeguards |
|---|---|---|---|
| Google Analytics Google LLC | Website usage analytics on our public marketing pages, loaded only after cookie consent (Google Consent Mode v2, all storage denied by default) | United States / EU | Google Ads Data Processing Terms with SCCs; IP anonymisation; consent gated |
| PostHog PostHog, Inc. | Product usage analytics (feature usage, retention) within the applications | EU / United States as configured | DPA with SCCs |
| Sentry Functional Software, Inc. | Error and crash monitoring for web, API and mobile apps | United States / EU | DPA with SCCs; PII scrubbing enabled |
Some services connected to your tenant are engaged by you, not by us, and are therefore your own processors rather than Fininvo sub-processors. Examples: a tenant-configured SMTP server replaces Amazon SES for that tenant; biometric devices, telephony providers and accounting integrations you connect are governed by your contract with that vendor. Payment gateways act as independent regulated entities for the payment itself.
Before we engage a new sub-processor that will process personal data, we update this page at least 30 days in advance. To receive proactive notice of changes by email, write to dpo@fininvo.comwith the subject "Subscribe: sub-processor notifications".
You may object to a new sub-processor on reasonable, documented data protection grounds within the notice period. If we cannot offer a reasonable alternative (such as keeping your tenant off the new sub-processor), you may terminate the affected subscription and receive a prorated refund of prepaid fees for the unused period, as your exclusive remedy.
Data Protection Officer
dpo@fininvo.comPrivacy Team
privacy@fininvo.comRegistered Office
Prashbi Global Services Pvt. Ltd.
Tholons Tower, 346 HIG, 17th Cross Rd, Dollars Colony,
R.M.V. 2nd Stage, Bengaluru, Karnataka 560094, India
CIN: U52100KA2020PTC133490