Processing agreements. Executed processing agreements recorded: 0 of 14 . A row says “Not yet executed” until a signed agreement is recorded in the register; we do not describe a contract that does not exist. “Cross-border” marks a provider incorporated outside India, or whose service runs outside India. “Where it runs” says where your data is processed. Where that is India, the data stays in India and the mark is a disclosure, not a transfer abroad.
In use These providers carry data today.
Amazon Web Services Cloud hosting (EKS compute, RDS, S3 object storage, MSK, KMS, STS)
Role Processor Status In use Data Every category the platform stores (account, financial, uploaded documents, chat, memory), at rest and in transit inside the VPC Where it runs India (AWS ap-south-1, Mumbai) Cross-border Foreign provider; data stays in India Processing agreement Not yet executed Cloudflare DNS and reverse proxy in front of the landing site (mukodi.com)
Role Processor Status In use Data Landing-site visitors' IP address and request metadata Where it runs Cloudflare global edge network (no India-only option) Cross-border Yes: data processed outside India Processing agreement Not yet executed Wired, switched off The code exists but the connection is off; no personal data reaches these providers until it is switched on.
Amazon Web Services (Amazon SES) Email delivery for sign-in links and account notices
Role Processor Status Wired, switched off Data Email address; Email subject and body (magic sign-in link, account notices) Where it runs India (AWS ap-south-1, Mumbai) Cross-border Foreign provider; data stays in India Processing agreement Not yet executed Google (Firebase Cloud Messaging) Push notifications to Android and iOS devices
Role Processor Status Wired, switched off Data Device registration token; Notification title, body and data fields Where it runs Google global infrastructure (no India-only option) Cross-border Yes: data processed outside India Processing agreement Not yet executed Apple (Apple Push Notification service) Delivery of push notifications to iOS devices
Role Processor Status Wired, switched off Data Device token; Notification title and body Where it runs Apple global infrastructure (no India-only option) Cross-border Yes: data processed outside India Processing agreement Not yet executed Google (Sign in with Google) Fetch of Google's public token-signing keys to verify a Google ID token
Role No personal data sent Status Wired, switched off Data None sent by the backend (it downloads Google's public signing keys only) Where it runs Google global infrastructure Cross-border Not yet known Processing agreement Not yet executed Apple (Sign in with Apple) Fetch of Apple's public token-signing keys to verify an Apple ID token
Role No personal data sent Status Wired, switched off Data None sent by the backend (it downloads Apple's public signing keys only) Where it runs Apple global infrastructure Cross-border Not yet known Processing agreement Not yet executed Planned Chosen but not yet connected.
MSG91 SMS gateway for sign-in codes and grievance notices
Role Processor Status Planned Data Mobile phone number; SMS text built from TRAI DLT templates (one-time sign-in code, grievance update notice) Where it runs Not yet known (no account exists) Cross-border Not yet known Processing agreement Not yet executed Not selected or not part of the beta No provider is connected for these services. They are listed so the gaps are visible.
Mobile and web crash reporting No provider selected
Role Processor Status Not selected Data None today (no crash SDK in the app) Where it runs Not applicable Cross-border Not yet known Processing agreement Not yet executed Human translation of app interface strings (ARB files) No provider selected
Role Role to be confirmed Status Not selected Data App interface strings only; no user data is expected (Counsel to confirm) Where it runs Not yet known Cross-border Not yet known Processing agreement Not yet executed Identity verification and liveness check No provider selected
Role Processor Status Out of beta Data None today (would be identity-document images and a selfie or liveness capture) Where it runs Not yet known Cross-border Not yet known Processing agreement Not yet executed DigiLocker (Government of India) Fetch of issued documents with the user's consent
Role Government source Status Out of beta Data None today (would be government-issued documents the user chooses to share) Where it runs India Cross-border No Processing agreement Not yet executed UIDAI (Unique Identification Authority of India) Aadhaar authentication or e-KYC
Role Government source Status Out of beta Data None (no Aadhaar authentication exists in code) Where it runs India Cross-border No Processing agreement Not yet executed Setu Account Aggregator FIU gateway (bank connect)
Role Role to be confirmed Status Out of beta Data None in the beta (would be consent artefacts, account identifiers and financial information the user consents to share) Where it runs India Cross-border No Processing agreement Not yet executed No third-party AI model vendor receives your data: our models run on infrastructure we operate. Questions about this list go to the Data Protection Officer at [email protected] grievance form .