by
Service Providers and Data Processors
Last updated 18 October 2026
Draft under legal review. This text may change before it takes effect.
1. Who these providers are
We use the service providers below to run Sehmat. Each one processes personal data for us under a contract or published terms that bind it to use the data only to provide its service.
- For the personal data of people who give consent through Sehmat, your organisation is the Data Fiduciary and we are your Data Processor. These providers are our sub-processors.
- For the personal data of our own website visitors, people who request access and console users, we are the Data Fiduciary and these providers are our processors.
2. Current providers
| Provider | What it does for Sehmat | When it is used | Where |
|---|---|---|---|
| Amazon Web Services (AWS) | Hosting, storage, backups, email, website delivery and AI features | Always | India |
| MSG91 | Sends SMS and WhatsApp messages | When an organisation sends messages by SMS or WhatsApp | India. WhatsApp messages are also carried by Meta, whose systems may be outside India |
| Meta (WhatsApp Cloud API) | Sends WhatsApp messages | Only if an organisation chooses Meta for WhatsApp | Meta’s systems, which may be outside India |
| DigiLocker, through MeriPehchaan | Checks age or guardian status | Only if an organisation turns on age or guardian checks | India |
| Microsoft 365 (Microsoft) | Hosts our email, including contact@bluepencil.com | When you write to us | Microsoft’s data centres |
From DigiLocker we keep, by default, only an age result and hashed values. An organisation can choose to also keep the person’s DigiLocker ID, name, date of birth and gender.
Providers an organisation brings
An organisation can connect its own account with Twilio (SMS), SendGrid (email) or its own mail server. Messages then go through that provider under the organisation’s own contract, and may be processed outside India. That provider is the organisation’s choice, not our sub-processor.
3. Changes to this list
We update this page before we add or replace a provider. Customers are told in advance, as section 7.1 of our Terms of Service and their contract set out.
| Date | Change |
|---|---|
| 18 October 2026 | First published. |
4. Questions
Write to contact@bluepencil.com. Our Privacy Policy explains how we handle personal data.