Subprocessors
Subprocessors
List of subprocessors and third-party services used by Antei, along with their respective scopes and roles.
Subprocessors
Antei uses a minimal set of subprocessors to support platform functionality. These services are selected based on security posture, reliability, and ability to operate under regional compliance requirements.
Infrastructure Providers
| Subprocessor | Purpose | Region(s) |
|---|---|---|
| Cloudflare | CDN, DNS, Firewall, R2 Storage | Global (primary) |
| Railway.app | Background worker hosting | USA |
| Render.com | App hosting, microservices | USA |
| Google Cloud | PostgreSQL database infrastructure | US Central (GCP) |
Platform Components
| Subprocessor | Purpose | Scope |
|---|---|---|
| Retool | UI rendering and public dashboards | UI layer, scoped per org, no write to DB |
| Sentry | Error monitoring and performance | Non-PII traces for debugging and stability |
| Nango | Unified OAuth for 3rd-party APIs | Manages tokens and API sync scopes securely |
| Resend | Transactional and system email delivery | Sends alerts, setup notifications, onboarding emails |
Government APIs
For tax ID validation and jurisdictional lookups, Antei connects directly with official government APIs:
| API Provider | Purpose | Regions |
|---|---|---|
| EU VIES | VAT ID Validation | European Union |
| India GSTN | GSTIN verification | India |
| UAE FTA | TRN lookup | UAE |
| UAE FTA | TRN lookup | UAE |
| UAE FTA | TRN lookup | UAE |
These services are used in read-only mode and no data is stored beyond validation logs.
Subprocessor Agreements
- All subprocessors are vetted for GDPR, DPDP, and SOC 2 alignment.
- Access is scoped to minimum permissions required for functionality.
- Logs and usage patterns are regularly reviewed.
Questions or Requests
To request a signed Data Processing Agreement (DPA) or raise concerns about subprocessors, contact us at legal@antei.com.