Skip to main content

Subprocessors

Third-party services that process customer data on behalf of Qryptonic.

Last Updated: January 8, 2026

Overview

In providing our services, Qryptonic engages certain third-party service providers (subprocessors) to process customer data. This page lists our current subprocessors and the purposes for which they process data.

All subprocessors are contractually bound to process data only as instructed by Qryptonic and in accordance with applicable data protection laws. We conduct security and privacy assessments of all subprocessors before engagement.

Current Subprocessors

Zoho Corporation

CRM, Email, Workspace, and Business Applications

United States / European Union
Data Processed

Contact information, business communications, support tickets

Certifications
SOC 2 Type IIISO 27001ISO 27017ISO 27018GDPR

Vercel Inc.

Website Hosting and Edge Network

United States (Global Edge)
Data Processed

Website analytics, access logs, IP addresses

Certifications
SOC 2 Type IIGDPR

Amazon Web Services (AWS)

Cloud Infrastructure and Assessment Platform

United States (configurable by region)
Data Processed

Assessment data, platform infrastructure, encrypted findings

Certifications
SOC 2 Type IIISO 27001FedRAMPHIPAA

OpenAI

LLM26 Analysis Engine (Anonymized Data Only)

United States
Data Processed

Anonymized cryptographic findings, pattern analysis (no PII)

Certifications
SOC 2 Type II

Google Cloud Platform

Analytics and Performance Monitoring

United States
Data Processed

Website analytics, anonymized usage data

Certifications
SOC 2 Type IIISO 27001FedRAMP

Data Residency

Primary Processing: United States (AWS us-east-1, us-west-2)

EU Processing: Available upon request for customers requiring EU data residency (AWS eu-west-1, eu-central-1)

Data Sovereignty: Customer data is not stored or processed outside contracted regions. Customers control data location via their Master Service Agreement.

Note: For specific data residency requirements, please contact our enterprise team to discuss your needs before engagement.

Updates to This List

We will update this page when we engage new subprocessors or make changes to existing subprocessor relationships. Material changes will be communicated to customers with active contracts at least 30 days in advance.

Customers may object to new subprocessors as provided in their Data Processing Agreement with Qryptonic.

Questions or Concerns

For questions about our subprocessors or to request a copy of our Data Processing Agreement, please contact:

legal@qryptonic.com

Response time: 2 business days