Loading…
We engage the third parties listed below to provide parts of the AutoFS service. We give Customers at least 30 days' notice before adding or replacing any sub-processor that processes personal data, by email and via an in-app banner.
Last updated 2026-09-06. Google Cloud Storage was added to this list on 2026-09-06; it has held encrypted off-site backups since 2026-08-16.
Virtual private server hosting. The PostgreSQL database, uploaded trial balances, generated financial-statement packages, client documents and application logs all live on this server, inside its disk volumes. No separate managed-database or object-storage provider is engaged to serve the live application; off-site backups go to Google Cloud Storage, listed below.
Location: Mumbai, India.
Off-site backup storage, for disaster recovery only. Once each night the database and an archive of the document volumes — uploaded trial balances, generated packages and client documents — are encrypted on our server with AES-256 before anything is sent, and only the encrypted files are uploaded. The backup account can add files and cannot read, overwrite or delete them. Backups are restored only to bring the service back after a failure; they are never read to answer an application request. No automatic expiry rule is configured on the bucket today, so we cannot state a period after which a backup copy ceases to exist.
Location: Mumbai, India (asia-south1).
Web application hosting and CDN for the public site and workspace UI.
Location: Global edge network; the origin region is configured for India (bom1).
Payment processing for subscriptions. GST tax invoices are issued by Tax One Advisory (OPC) Private Limited as the seller; Razorpay is the payment processor only. Engaged once paid plans are open; no charges are collected during controlled early access.
Location: India.
Google Sign-In (OAuth) for optional account authentication. Processes the Google account identifier and basic profile fields you authorize.
Location: Global.
Listed, not enabled in production today — no data is sent.
Product analytics — page views and feature usage. No analytics key is configured in production, so the application sends PostHog nothing at present. Listed because the application supports it and it may be switched on later, at which point it would run only with your consent and with URLs redacted before they leave the browser.
Location: United States (US cloud), if enabled.
Transactional email — verification, invitations, FS-share, billing alerts.
Location: United States.
Listed, not enabled in production today — no data is sent.
Application error tracking with stack traces. No Sentry endpoint is configured in production, so no error data leaves the server at present. Listed because the application supports it and it may be switched on later. Self-hosted alternative planned post-pilot.
Location: United States, if enabled.
Subscribe to changes at subprocessors-notice@autofs.in to receive the 30-day notice automatically.