Last updated: 31 August 2026
A "sub-processor" is a third party that processes personal data on ITRSimple's behalf to help us provide the Services. This page lists the sub-processors used by the ITRSimple cloud application (app.itrsimple.com).
The desktop application runs offline and does not use these sub-processors for your data, except: licence / update checks and optional bug reports go to our own control-plane server, and - only if you enable AI-assisted classification - the AI provider below is used.
We enter into data-processing terms with each sub-processor requiring protections no less than those in our own Data Processing Agreement.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| DigitalOcean, LLC | Cloud hosting and managed PostgreSQL database for the cloud application | All workspace data you and your clients enter into the cloud application | India (Bangalore region) |
| Anthropic, PBC | AI-assisted transaction classification - only when you enable it | Transaction narration and type; client name; client's own bank-account last-4; your confirmed classification examples; supplier/customer/related-party names. Not transaction amounts. Not uploaded documents. | USA |
Pathinettu Solutions LLP - control-plane (cp.itrsimple.com) |
Our own admin service: licensing, subscription records, feedback/grievance intake, aggregated error reports, deletion-request queue | Account identifiers, firm name, subscription and licensing data, feedback/grievance text, deletion-request metadata | India |
| Google LLC - Google Analytics | Website usage analytics (itrsimple.com only) |
Aggregated site-usage data, IP address (as processed by Google Analytics) | USA / global |
| [TO CONFIRM: Email provider] | Sending service and transactional emails (deletion warnings, expiry notices, grievance replies) | Recipient email address, message content | [TO CONFIRM] |
| [TO CONFIRM: Payment processor, e.g. Razorpay] | Processing subscription payments (once billing is live) | Name, email, payment-method and transaction details | India |
Sub-processors located outside India (currently Anthropic, and Google for website analytics) receive only what is necessary for their function. We make these transfers only to countries permitted under the DPDP Act, 2023.
We will update this page and notify cloud-application customers (via the app or email) before adding or replacing a sub-processor that processes client personal data, so that a Data Fiduciary may object on reasonable data-protection grounds.
raj@itrsimple.com (Grievance Officer).