Primary hosting and Customer Data storage: Microsoft Azure, Central India region. Every subprocessor is bound by a written agreement with confidentiality, security and data-protection terms at least as protective as our Privacy Policy.
1. Infrastructure and core services
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Microsoft Corporation (Azure) | Cloud hosting: compute, databases, object storage, backups, key management | All service data | India (Central India) |
| Cloudflare, Inc. | Website hosting, CDN, DNS, TLS, DDoS and bot protection (Turnstile), website waitlist and consent records | Connection data, website form data | Global edge network |
| Google LLC (Firebase Authentication / Identity Platform) | Sign-in, password and Google-account authentication | Name, e-mail, auth identifiers | United States / global |
| Dodo Payments [legal entity] | Merchant of Record: checkout, payments, tax, invoicing, refunds | Billing contact, payment and tax data | [location] |
| Zoho Corporation (ZeptoMail) | Transactional e-mail (verification, invitations, notifications, app e-mails sent on your behalf) | E-mail address, message content | [India / data-centre region] |
2. AI model providers
Used to run UniAgent, App Studio and other AI features. Prompts and the context needed to answer them are sent to the provider of the model in use; providers are contractually barred from training on this data. Providers marked “when selected” receive data only when your organization or plan uses one of their models.
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Corporation (Azure OpenAI / Azure AI Foundry) | Default model inference: chat, reasoning, images, speech and transcription | [Azure AI region(s)] |
| Google LLC (Gemini API) | Model inference, voice and embeddings — when selected | United States / global |
| OpenAI, L.L.C. | Model inference — when selected | United States |
| Anthropic, PBC | Model inference — when selected | United States |
| Fireworks AI, Inc. | Open-weight model inference — when selected | United States |
| OpenRouter, Inc. | Routing to open-weight and third-party models — when selected | United States |
3. Channels and integrations
These process data only when your organization connects them.
| Subprocessor | Purpose | Location |
|---|---|---|
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd. (WhatsApp Business Cloud API) | Sending and receiving WhatsApp messages and calls on your business number | Global |
| Telegram (Telegram Messenger Inc. / Telegram FZ-LLC) | Telegram bot messaging channel | Global |
| Composio, Inc. | Connectors to third-party apps (for example Gmail and Outlook) that you authorise | United States |
4. Changes and objections
We will update this page at least 30 days before a new subprocessor starts processing Customer Data (sooner only in an emergency affecting the security or continuity of the Service). To be notified by e-mail, write to hello@uniwork.ai. A Customer may object on reasonable data-protection grounds within that period; we will work with you on an alternative, and if none is possible you may terminate the affected Service and receive a pro-rata refund of prepaid fees.