Overview
As a Data Processor under the Digital Personal Data Protection Act 2023, Tensor Machine may engage sub-processors — third-party entities that process personal data on our behalf to help us deliver our services. This page lists all active sub-processors.
Before engaging any new sub-processor or materially changing an existing sub-processor's scope, Tensor Machine will notify customers with 30 days advance notice via email and this page. Customers who have signed a DPA have the right to object to new sub-processors within 15 days of notification.
Infrastructure
Amazon Web Services India Pvt. Ltd.
Service: Cloud infrastructure (compute, storage, networking). Purpose: Hosting all Tensor Machine systems, including inference compute, databases, and API servers. Location: AWS Mumbai region, India. Data processed: All customer data processed or stored by Tensor Machine infrastructure. Certification: ISO 27001, SOC 2 Type II.
Security & Networking
Cloudflare Inc.
Service: DDoS protection, WAF, CDN. Purpose: Protecting Tensor Machine's public endpoints from distributed attacks and delivering static assets. Location: Traffic routed through Cloudflare's global network; however, origin data is served from and returned to India. Data processed: IP addresses, HTTP request metadata. Cloudflare does not have access to request payloads. Certification: ISO 27001, SOC 2 Type II.
Payments
Razorpay Software Pvt. Ltd.
Service: Payment processing. Purpose: Processing INR payments via UPI, credit/debit cards, NEFT, and other Indian payment methods. Location: India (Bangalore). Data processed: Payment details, billing address, name, and email of the paying party. Tensor Machine does not store card numbers — all payment instrument data is held by Razorpay. Razorpay is a licensed Payment Aggregator regulated by the Reserve Bank of India.
Email & Communications
Amazon SES (Simple Email Service) — AWS India
Service: Transactional email delivery. Purpose: Sending account verification emails, billing notifications, and system alerts. Location: AWS Mumbai region, India. Data processed: Email addresses and message content of transactional emails (invoice copies, alerts). No marketing emails are sent through this sub-processor without consent.
Analytics
Google LLC — Google Analytics 4
Service: Web and documentation analytics. Purpose: Understanding aggregate traffic and usage across our public marketing website and documentation. Location: Google's global infrastructure; analytics data may be processed outside India, including in the United States. Data processed: A pseudonymous client identifier, coarse IP-derived location, and page/event interaction data — collected only on our public, unauthenticated pages. Consent-gated: Analytics loads only after a visitor accepts our cookie banner, and Google Consent Mode denies analytics storage by default; advertising and personalisation signals are disabled. No account, billing, or API/inference data is shared with Google.
Notification of Changes
We will update this page and notify customers by email at least 30 days before adding new sub-processors or materially changing an existing sub-processor's data processing scope. The date of last update is shown at the top of this page. Enterprise customers who have signed a DPA may object to new sub-processors by contacting legal@tensormachine.ai within 15 days of notification.