Third-Party Services Disclosure

We believe in complete transparency. Below is an exhaustive registry of external services, cloud infrastructure providers, APIs, and sub-processors utilized within the Indiquer ecosystem.

Data integration transparencySub-processor registerUpdated quarterly
Entity
Indiquer Global Service Pvt. Ltd.
Scope
Sub-Processors & External APIs
Security Review
SOC 2 & ISO 27001 Vetted
01

Cloud Infrastructure & Network Providers

Our core microservices, databases, and client portals run on enterprise-grade infrastructure providers:

Service Provider Role & Function Data Processed Location / Safeguards
Hetzner Online GmbH Primary dedicated bare-metal & cloud compute Encrypted application containers, database volumes Germany / Finland (GDPR compliant, ISO 27001)
Amazon Web Services (AWS) Off-site disaster recovery & cold backup storage AES-256 encrypted immutable snapshots India (ap-south-1) & US East (us-east-1)
Cloudflare, Inc. Global CDN, DDoS mitigation & DNS routing IP addresses, transient request headers Global Anycast Edge Network
Tailscale Inc. Zero-trust encrypted WireGuard mesh network Encrypted node transport telemetry Peer-to-peer end-to-end encrypted
02

Payment Gateways & Financial Processors

Indiquer integrates exclusively with licensed, PCI-DSS Level 1 certified payment rails. Customer credit card numbers and banking credentials are never received, stored, or processed on Indiquer servers.

  • Stripe, Inc.: Processes international credit cards, debit cards, and corporate ACH transfers for US and global accounts.
  • Razorpay Software Pvt. Ltd.: Processes domestic UPI payments, NetBanking, and corporate rupee transfers for Indian entities.
03

Maps, Media & Typography Integrations

To deliver modern interactive user experiences:

  • Google Maps Platform: Used on our contact directory to provide office coordinates and interactive navigation. Subject to Google's Privacy Policy.
  • Google Fonts: Web fonts (Plus Jakarta Sans, Space Grotesk, DM Mono) are loaded via static cached headers with zero tracking identifiers.
  • YouTube / Vimeo: Embedded product demos may load player frames when initiated by user interaction. We configure embeds with privacy-enhanced mode (nocookie) wherever supported.
04

Analytics, Telemetry & Diagnostics

We employ strictly privacy-focused diagnostic tooling to ensure high availability and monitor application errors:

  • Aggregated Traffic Logs: Nginx server-side access logs recorded with IP anonymization for capacity planning.
  • Error Diagnostic Telemetry: Internal logging microservices that capture JavaScript client exceptions to patch rendering bugs without collecting personal data.
05

Communications, Chat & CRM Integrations

Tools used to coordinate client conversations and technical helpdesk requests:

  • Meta Platforms (WhatsApp Business API): Official client hotline channel for instant consultations and real-time support (+91 78068 21856).
  • SMTP Relay Infrastructure: Automated transactional email delivery for inquiry receipts, system alerts, and security verification codes.
  • Self-Hosted Internal CRM (Indi360): Proprietary on-premises CRM running on private servers with no third-party cloud data broker access.
06

Vendor Governance & Data Processing Agreements

Every external provider utilized by Indiquer is subject to rigorous security vetting prior to integration:

Mandatory Data Processing Agreements (DPAs): Indiquer executes binding DPAs with all cloud infrastructure and software sub-processors, incorporating EU Standard Contractual Clauses (SCCs) and India DPDP 2023 compliance terms.