Authorized third-party infrastructure and service providers utilized by Kuklabs Inc. to deliver commercial cloud services.
Last updated August 30, 2026 · Effective August 30, 2026
Entity: Kuklabs Inc. (Delaware, USA) Last Updated: November 3, 2026
To provide our cloud Services, Kuklabs Inc. engages third-party entities ("Subprocessors") to assist with infrastructure, database hosting, payment processing, and communications. Each subprocessor undergoes rigorous security vetting and enters into a binding Data Processing Agreement with Kuklabs.
| Subprocessor | Processing Activity | Location | Applicable Certifications |
|---|---|---|---|
| Microsoft Azure | Application compute and primary MySQL database hosting. | Azure region of the production subscription (details on request: [email protected]) | Provider-published SOC and ISO 27001 attestations |
| S3-compatible object-storage provider | Uploaded files and offsite database backups. | Per environment configuration (details on request) | Provider-published attestations |
| Cloudflare, Inc. | Content delivery network (CDN), DNS resolution, DDoS protection, and SSL termination. | Global Edge Network | SOC 2 Type II, ISO 27001, PCI-DSS |
| Subprocessor | Processing Activity | Location | Applicable Certifications |
|---|---|---|---|
| Stripe, Inc. | Subscription billing, credit card tokenization, and international recurring payment processing. | United States / Global | PCI-DSS Level 1, SOC 1/2 |
| Razorpay Software Pvt. Ltd. | Payment gateway for India domestic currency (UPI, Netbanking, Cards) transactions. | India | PCI-DSS Level 1, ISO 27001 |
| Subprocessor | Processing Activity | Location | Applicable Certifications |
|---|---|---|---|
| Google LLC (Firebase / Google Auth) | User phone number SMS verification and optional Google OAuth single sign-on. | United States | SOC 1/2/3, ISO 27001 |
| Resend, Inc. | Transactional system email delivery (invoices, password resets, verification codes). | United States | SOC 2 Type II |
Kuklabs provides customers with at least thirty (30) days' notice prior to authorizing any new subprocessor. Customers subscribed to trust updates will receive notification via email and updates published to this page.