Legal
Subprocessors
The third-party providers CymBytes engages to deliver the platform. Last updated May 28, 2026.
A subprocessor is a third party that CymBytes Technologies Private Limited engages to process personal data on its behalf in the course of providing the Service. The table below lists our current subprocessors, what they do, and what categories of data they process. This page is maintained alongside our Privacy Policy and Terms of Service.
Change-notice commitment. Before adding or replacing a subprocessor that has access to personal data, we will update this page and provide at least thirty (30) days’ advance notice to customers who have subscribed to the notification list at privacy@cymbytes.com. Customers may object to a new subprocessor on reasonable grounds; if we cannot accommodate the objection, the customer may terminate the affected portion of the Service.
Cloud infrastructure
Hosting, networking, storage, and database services that the platform runs on.
| Subprocessor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Microsoft Azure | Cloud infrastructure for the platform — Container Apps, Azure Database for PostgreSQL, Storage, SignalR, Front Door, Application Insights, and the underlying virtual machines that host customer lab environments. | All Customer Content and personal data processed by the Service, including account profiles, lab telemetry, scoring events, and lab-environment activity. | Central India and West Europe (additional regions added as customers require). |
Identity and authentication
User identity, sign-in, and authentication-related communications.
| Subprocessor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Clerk | User identity, authentication, session management, multi-factor authentication, organization membership, and authentication-related email (sign-in links, invitations, password resets). | Account identifiers, names, email addresses, hashed credentials, IP address and device metadata at sign-in, and organization membership. | United States (Clerk, Inc.). |
AI and machine-learning providers
Foundation-model providers that power AI features such as the AI Lab Assistant and AI tutor.
| Subprocessor | Purpose | Data processed | Processing location |
|---|---|---|---|
| Anthropic | Large language model that powers the AI Lab Assistant, AI tutor, and related guidance features inside the Service. | Prompts, lab context, and any text you submit to AI-powered features. We do not send account credentials or billing information. Anthropic does not train its models on customer data submitted through the API. | United States (Anthropic PBC). |
| DeepSeek | Alternate large language model used for select AI features and as a fallback provider. | Prompts and lab context submitted to AI-powered features when this provider is selected. | Singapore / global (DeepSeek). |
Cross-border transfers
Several subprocessors are based outside India. Where personal data of EU/EEA, UK, or Switzerland-based individuals is transferred to these subprocessors, CymBytes relies on the European Commission’s 2021 Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable), supplemented by appropriate technical and organizational measures. For India-based individuals, transfers are made in accordance with the Digital Personal Data Protection Act, 2023.
For a current copy of CymBytes’ Data Processing Agreement (DPA), including the applicable transfer mechanisms and a list of subprocessors annexed to the DPA, email privacy@cymbytes.com.