Sub-processors & Data Processing

Last updated: 23 July 2026

Our role (Data Processing Agreement)

For the data your agency enters about its own customers — leads, travellers, bookings, quotations, payments — your agency is the data controller / Data Fiduciary and Adwix Atlas acts only as a processor, processing that data solely on your documented instructions to provide the service. This page, together with our Privacy Policy and Terms of Service, forms our Data Processing Agreement (DPA).

We: (a) process customer data only to run the service and on your instructions; (b) keep it confidential and apply technical & organisational safeguards (encryption in transit, tenant isolation via row-level security, access controls); (c) use only the sub-processors listed below; (d) assist you with data-subject requests (access, correction, deletion, export); and (e) delete or return your data on termination. A countersigned DPA is available on request at privacy@adwixatlas.com.

Current sub-processors

We use the following third parties to help deliver the service. Each is bound by its own data-protection commitments.

Sub-processorPurposeProcessing location
SupabasePrimary database, authentication & file metadataManaged Postgres (region selectable; India/EU/US)
VercelApplication hosting, serverless functions & CDNGlobal edge / USA
Cloudflare R2Document & image storage (uploads, vouchers, PDFs)Global
ResendTransactional & notification email deliveryUSA
Meta PlatformsWhatsApp Business messaging & ad-conversion (CAPI) signalsGlobal
Anthropic (Claude)Optional AI assistant features (only data you send to AI)USA
RazorpaySubscription & payment processing (billing only)India
RenderHosting for the WhatsApp messaging backendUSA / Singapore

Changes to this list

We may add or replace sub-processors as the service evolves. Material changes will be reflected here; where required, we will give reasonable notice so you can review them. For questions or to request a signed DPA, contact privacy@adwixatlas.com.