# 1. Infrastructure Subprocessors
Core services: Microsoft Azure — application hosting, databases and storage (primary hosting in the UAE); Cloudflare — website hosting, network delivery and security (global processing); ZeptoMail / Zoho — transactional email content, recipient contact details and delivery events; Stripe — billing, payments and fraud prevention.
Optional services: Meta WhatsApp Cloud API — phone numbers and notification content when enabled; Google Firebase Cloud Messaging — device tokens and push notification data when enabled; Google Analytics — website usage data after consent; Apple and Google Wallet — pass data when used.
Customer-selected integrations: OpenAI, Anthropic or a custom AI endpoint, and enabled social sign-in providers, process data under the relevant provider arrangement. These are not all automatically Certifada subprocessors.
Providers outside primary hosting may process data internationally. Regional routing, support access and contracting entities depend on the provider account and service. Contact hello@cuspforge.com for the current provider and transfer details needed for your DPA before sending restricted data.
# 2. Subprocessor Change Notification
For notice of intended subprocessor additions or replacements, contact hello@cuspforge.com with your workspace and contact email. We provide at least 14 days’ advance notice and consider reasonable data-protection objections under the DPA. This request channel does not imply an automated subscription feature.