Subprocessors
Third-party services that process customer data on behalf of Qryptonic.
Last Updated: January 8, 2026
Overview
In providing our services, Qryptonic engages certain third-party service providers (subprocessors) to process customer data. This page lists our current subprocessors and the purposes for which they process data.
All subprocessors are contractually bound to process data only as instructed by Qryptonic and in accordance with applicable data protection laws. We conduct security and privacy assessments of all subprocessors before engagement.
Current Subprocessors
Zoho Corporation
CRM, Email, Workspace, and Business Applications
Contact information, business communications, support tickets
Vercel Inc.
Website Hosting and Edge Network
Website analytics, access logs, IP addresses
Amazon Web Services (AWS)
Cloud Infrastructure and Assessment Platform
Assessment data, platform infrastructure, encrypted findings
OpenAI
LLM26 Analysis Engine (Anonymized Data Only)
Anonymized cryptographic findings, pattern analysis (no PII)
Google Cloud Platform
Analytics and Performance Monitoring
Website analytics, anonymized usage data
Data Residency
Primary Processing: United States (AWS us-east-1, us-west-2)
EU Processing: Available upon request for customers requiring EU data residency (AWS eu-west-1, eu-central-1)
Data Sovereignty: Customer data is not stored or processed outside contracted regions. Customers control data location via their Master Service Agreement.
Note: For specific data residency requirements, please contact our enterprise team to discuss your needs before engagement.
Updates to This List
We will update this page when we engage new subprocessors or make changes to existing subprocessor relationships. Material changes will be communicated to customers with active contracts at least 30 days in advance.
Customers may object to new subprocessors as provided in their Data Processing Agreement with Qryptonic.
Questions or Concerns
For questions about our subprocessors or to request a copy of our Data Processing Agreement, please contact:
Response time: 2 business days