Tantra Data Processing Addendum

This Addendum supplements the Terms and Conditions and applies when we process personal data on your behalf as a data processor under the Digital Personal Data Protection Act, 2023 (DPDPA).

We process personal data only on your documented instructions (including Consent Letter) and for the purpose of providing services.

We use Microsoft Azure (India regions) and Amazon Web Services (India regions) as sub-processors for hosting/infrastructure. Full list available upon request.

We implement appropriate technical and organizational measures (DPDPA Sec. 8(5)), including encryption, access controls, and regular testing.

We will notify you without undue delay of any personal data breach (DPDPA Sec. 8(6)).

We will assist you in responding to data subject requests (access, correction, erasure) within reasonable time.

Upon termination, we delete or return data as instructed, per our policy.

You may audit our compliance upon reasonable notice (once per year).

This Addendum is governed by the laws of India.