Supabase
Database, sign-in and file storage
seesAll application data and any file while it is held by us
whereIndia
/sub-processors · everyone who can touch it
Every company in the chain.The complete list of third-party sub-processors used by Gaurify OS, what each one can see, and where it holds data.
Running Gaurify OS means a small number of other companies handle parts of the work. Here is all of them, what each can actually see, and where. Checked against the running production system on 7 September 2026, not written from memory.
said plainly
Your data is stored in India, and several companies on this list are outside it. If you are in the UK or the EU, that is an international transfer and you should know it before you sign, not after. Write to us and we will give you a data processing agreement.
running the product
Running the product.
Vercel
Running and serving the application
seesRequests and server logs
whereUnited States
Cloudflare
Storage for delivered files (R2)
seesDelivered files once they are moved off the primary store
whereGlobal
The Google Drive and Calendar connection
seesFiles copied into the studio's own Drive, and the calendar events it creates
whereGlobal
reaching people
Reaching people.
Brevo
Transactional email, such as invites and invoice notices
seesRecipient email addresses and the content of those emails
whereEuropean Union
WhatsApp Business (Meta)
Client messaging from inside the app
seesPhone numbers and the content of messages sent through it
whereGlobal
Apple (APNs)
Push notifications to iPhone
seesDevice tokens and the text shown in a notification
whereGlobal
taking money
Taking money.
Razorpay
Subscription and invoice payments
seesBilling name, contact details and payment status. Card numbers never reach us
whereIndia
PayPal
International payments
seesBilling details and payment status. Card numbers never reach us
whereGlobal
the assistant
The assistant.
OpenRouter
The assistant, tried first
seesOnly the text sent to the assistant, plus the project context it is asked about
whereUnited States
Groq
The assistant, if the first is unavailable
seesThe same assistant text
whereUnited States
Anthropic
The assistant, if both above are unavailable
seesThe same assistant text
whereUnited States
about the assistant
The assistant sends text to whichever of the three providers above is available, in that order, so that a reply your client is waiting on is never lost to one company being down. It sees the message it is asked about and the project context around it. It does not read your files, and your content is not used to train anyone’s model. If you would rather the assistant were switched off for your workspace entirely, ask us and we will do it.
your Drive is not on this list
When you connect Google Drive, files are copied into your own Google account, under your own control, revocable by you at any time from Google’s settings. That is not a company we hand your data to. It is your data going home. It is on this page only because it is the first thing people look for here.
This list changes when the system changes, in the same release. If you need advance notice of new sub-processors written into your contract, or a signed data processing agreement, write to hello@gaurifyhq.com and a person will reply.