Nabha Sub-processors
This page lists the third parties that process data on our behalf to run Nabha. It is referenced by the Privacy Policy and the Data Processing Addendum. We give account administrators 30 days' notice before adding or replacing a sub-processor.
| Sub-processor | Service | Data | Location |
|---|---|---|---|
| Google Cloud (Google Cloud India Pvt Ltd / Google LLC) | Compute, databases, storage, logging, backups | All Service data | India (asia-south1, Mumbai) |
| Paddle.com Market Ltd | Merchant of Record for customers outside India — checkout, invoicing, tax, refunds, subscription management | Billing identity and contact details | United Kingdom (with Paddle's own sub-processors) |
| Razorpay Software Private Limited | Payment gateway for customers in India, where Varalix is the Merchant of Record | Billing identity, contact details, payment instrument metadata (no card data is stored by Varalix) | India |
| Resend, Inc. | Transactional email (verification codes, security and service notices) | Recipient email, name, message content | United States |
| Mistral AI | AI-assisted interpretation of device data, when your organisation selects this model | Data your organisation submits for inference, plus schema context | France (European Union) |
| Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (DeepSeek) | AI-assisted interpretation of device data, when your organisation selects this model | Data your organisation submits for inference, plus schema context | China |
| Anthropic, PBC (Claude) | AI-assisted interpretation of device data, when your organisation selects this model | Data your organisation submits for inference, plus schema context | United States |
| OpenAI, L.L.C. (ChatGPT) | AI-assisted interpretation of device data, when your organisation selects this model | Data your organisation submits for inference, plus schema context | United States |
About the AI providers. Your organisation chooses which model the AI features use. Only the model you select receives data, and only the data submitted for that feature — never account or billing data. If you have a data-residency constraint, choose accordingly or leave the AI features off.
Infrastructure components operated by Varalix inside Google Cloud (PostgreSQL, GreptimeDB, NATS, Redis, MQTT broker) are not third-party sub-processors.
Change log
- 8 September 2026 — initial publication.