List of Subprocessors
To provide our services, Thriving Billions Private Limited (“Dehurdle”) engages third-party data processors to access or process personal data represented below.
Overview
We maintain a list of these Subprocessors to provide transparency to our customers and to comply with applicable global data privacy laws, including the Digital Personal Data Protection Act (DPDPA), the General Data Protection Regulation (GDPR), and HIPAA. We undertake strict due diligence on all Subprocessors to ensure they meet our rigorous security and privacy standards.
Data Residency & AI Processing
On our Scale plan, Dehurdle offers regional data residency to meet compliance requirements. Persistent user data — including databases, object storage, authentication, and caching — resides within the customer's designated region (such as EU-Frankfurt, APAC-Mumbai, or US-Virginia). For European clients, all persistent data remains within the EU.
Dehurdle processes AI interactions under strict enterprise zero-retention terms. All AI API calls are transient processing only — user voice dialogue and transcripts are not stored, retained, or used to train any public AI model. This is contractually guaranteed under our Data Processing Addendum (DPA).
Authorized Subprocessors
| Name | Purpose | Location | Data Categories | DPA |
|---|---|---|---|---|
| Google Cloud Platform | AI processing, speech-to-text, text-to-speech, and semantic search | Customer-designated region (EU / APAC / US) | Coaching voice data (transient in-memory processing), conversation transcripts | Google Cloud DPA |
| Amazon Web Services | Cloud hosting, primary database storage, transactional emails, and CDN assets | Customer-designated region (Frankfurt / Mumbai / Virginia) | Account parameters, session authorization tokens, stored user documents | AWS DPA |
| ElevenLabs | Premium voice synthesis for realistic AI persona conversations (enterprise tier) | United States (transient in-memory processing only) | Dialog text prompts (transient processing, no data stored) | ElevenLabs DPA |
| Sarvam AI | Regional Indian language voice synthesis | India (transient in-memory processing only) | Dialog text prompts (transient processing, no data stored) | Sarvam AI DPA |
| OneSignal | Transactional messaging and workflow push notifications | United States | Device identifiers, token strings, short notification content | OneSignal DPA |
| Slack Technologies (Salesforce) | Delivery of daily coaching tips and workspace notification triggers | United States | Notification metadata, channel names, workspace IDs | Slack DPA |
| Microsoft Corporation | MS Teams integrations, workspace notifications, and calendar syncing | Configurable (Azure tenant regional boundaries) | Calendar free/busy slots, notification parameters, workspace context | Microsoft DPA |
| Encrypted Relational Database (AWS Infrastructure) | Encrypted user profile data, project configurations, and metadata | Customer-designated region (EU / APAC / US) | Name, work email, workspace preferences, metadata | Covered under AWS DPA |
| Encrypted In-Memory Cache (AWS Infrastructure) | In-memory caching, rate-limiting counters, and session validations | Customer-designated region (EU / APAC / US) | Active session tokens, throttle control counts | Covered under AWS DPA |
Updates & Notifications
As our business grows and evolves, the Subprocessors we engage may also change. We will provide our customers with at least 30 days' prior written notice before engaging any new Subprocessor. During this notice period, you may object to the engagement of the new Subprocessor. If you object and we cannot reasonably accommodate your objection, either party may terminate the affected services.
If you have any questions regarding subprocessors or security policies, please contact us at reach@dehurdle.com.
Last updated: July 2026