Current subprocessors
PALM SOUQ PRIVATE LIMITED engages the following subprocessors to provide the Service. Each is bound by a written agreement with data protection terms at least as protective as our Data Processing Addendum. Request content passes only through PALM SOUQ-operated gateway processes on the infrastructure below and is never stored, logged or shared with these providers as data in its own right.
| Subprocessor | Purpose | Data handled | Location |
|---|---|---|---|
| Cloudflare, Inc. | Edge network, Anycast routing, DDoS protection, secrets storage for edge gateway nodes | Request metadata in transit; encrypted provider keys | Global edge network (280+ locations) |
| Amazon Web Services, Inc. | Regional control planes, metering store, key management (AWS KMS), backups | Request metadata, account data, encrypted provider keys | United States, Germany (EU), India, Singapore |
| Google Cloud (Google LLC) | Analytics warehouse for aggregated cost and margin reporting | Request metadata and aggregates | United States, European Union |
| Datadog, Inc. | Infrastructure monitoring and alerting (metrics and traces, no payloads) | Service performance data, hashed tenant identifiers | United States, European Union |
| Stripe, Inc. | Subscription billing and payment processing for PALM SOUQ invoices | Billing contact, billing address, payment details | United States |
| Postmark (ActiveCampaign, LLC) | Transactional email: alerts, invoices, password resets | Name, email address, alert content | United States |
| Slack Technologies, LLC | Breaker and budget alert delivery to customer workspaces, shared support channels | Alert content, user names in shared channels | United States |
| Zendesk, Inc. | Customer support ticketing | Name, email, ticket content | United States |
What is not a subprocessor
- Model providers you configure, such as OpenAI, Anthropic, Google Gemini, AWS Bedrock, Azure OpenAI, DeepSeek or Groq. They receive requests on your instruction under your own provider agreements.
- Billing platforms you connect, such as Stripe Billing, Metronome, Orb or Lago. PALM SOUQ sends usage events to your account on your instruction.
- Observability tools you connect through our OpenTelemetry export.
Change notifications
We notify account owners by email at least 30 days before a new subprocessor begins processing Customer Personal Data, and update this page at the same time. To receive notices at another address, email privacy@palmsouqltd.com. You may object on reasonable data protection grounds as described in section 7 of the Data Processing Addendum.
PALM SOUQ PRIVATE LIMITED, a private limited company incorporated in India. Questions about this document: legal@palmsouqltd.com. Privacy requests: privacy@palmsouqltd.com.