Cogniron Technology Solutions Private Limited (“Cogniron”) uses the third-party services listed below to operate the Cognituring platform. Each is engaged under a written data-processing agreement (DPA) and processes personal data only on documented instructions from Cogniron.
To receive notifications when this list changes, email support@cogniron.com.
Amazon Web Services (AWS)
- Purpose:
- Cloud infrastructure: compute, managed database, cache, object storage, and secrets management for the platform.
- Data shared:
- All platform data, encrypted in transit and at rest.
- Processing region:
- us-east-1 (United States), ap-south-1 (India).
Amazon CloudFront
- Purpose:
- Content delivery network and TLS termination for app.cognituring.com.
- Data shared:
- Request metadata (URL, IP, user-agent). No request bodies.
- Processing region:
- Global edge network.
AWS Cognito
- Purpose:
- User authentication, password storage, multi-factor authentication.
- Data shared:
- Email address, password hash, MFA factors.
- Processing region:
- us-east-1 (United States).
AWS Simple Email Service (SES)
- Purpose:
- Transactional email: account verification, password reset, invitation, billing receipts.
- Data shared:
- Recipient email address, sender, subject, body, delivery status.
- Processing region:
- ap-south-1 (Mumbai, India).
OpenAI
- Purpose:
- Large-language-model inference for selected workflows (e.g. test generation, analysis).
- Data shared:
- Prompt content you submit through the platform. Invoked via the paid OpenAI API; prompts are not used to train OpenAI's models under the standard API terms.
- Processing region:
- United States.
Anthropic
- Purpose:
- Large-language-model inference for selected workflows (Claude family).
- Data shared:
- Prompt content you submit through the platform. Invoked via the paid Anthropic API; prompts are not used to train Anthropic's models under the standard API terms.
- Processing region:
- United States.
Google (Gemini API via Google Cloud)
- Purpose:
- Large-language-model inference for selected workflows.
- Data shared:
- Prompt content you submit through the platform. Invoked via the paid Gemini API; prompts are not used to train Google's models under the Gemini API paid-tier terms.
- Processing region:
- United States and European Union, depending on model.
FastSpring
- Purpose:
- Payment processing and merchant-of-record for paid subscriptions (when enabled).
- Data shared:
- Billing name, email, country, tax ID (if applicable), payment instrument metadata. Card data never touches Cogniron infrastructure.
- Processing region:
- United States; processes globally as merchant-of-record.
International transfers
Where personal data leaves the EU/UK or other regions with cross-border restrictions, Cogniron relies on the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) and the UK International Data Transfer Addendum, together with the supplementary technical and organisational measures published by the relevant subprocessor.
Notification of changes
We update this list when we add a new subprocessor, retire an existing one, or change the scope of processing. Where required by an existing DPA, we notify affected customers at least 30 days before the change takes effect so they may object.