Infrastructure Transparency
Authorized Sub-processors
Book Your Calendar engages selected third-party service providers to support our cloud infrastructure, calendar sync, notifications, and payments.
Last Reviewed: October 2026
Payments via Razorpay• PCI-DSS Level 1
ISO 27001:2022• Certified Security
OAuth 2.0 Restricted• Google & Outlook Sync
DPDP Act 2023 Aligned• India Cloud Protected
Payments via Razorpay• PCI-DSS Level 1
ISO 27001:2022• Certified Security
OAuth 2.0 Restricted• Google & Outlook Sync
DPDP Act 2023 Aligned• India Cloud Protected
Payments via Razorpay• PCI-DSS Level 1
ISO 27001:2022• Certified Security
OAuth 2.0 Restricted• Google & Outlook Sync
DPDP Act 2023 Aligned• India Cloud Protected
Payments via Razorpay• PCI-DSS Level 1
ISO 27001:2022• Certified Security
OAuth 2.0 Restricted• Google & Outlook Sync
DPDP Act 2023 Aligned• India Cloud Protected
Third-Party Infrastructure & Processing Entities
Each sub-processor is thoroughly vetted for security, confidentiality, and regulatory alignment with India’s DPDP Act and GDPR.
| Sub-processor | Purpose & Service | Data Location | Security Certifications |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, compute, and encrypted database infrastructure (Data Residency) | India (Mumbai, ap-south-1) | ISO 27001, SOC 2 Type II, PCI-DSS |
| Razorpay Software Pvt Ltd | Payment gateway processing, UPI collection, and payouts | India | PCI-DSS Level 1, ISO 27001 |
| Google Cloud Platform / Workspace | Two-way Google Calendar synchronization, Google Meet link generation & OAuth identity | India / Global | ISO 27001, SOC 2/3, GDPR Compliant |
| Microsoft Corporation | Outlook 365 calendar synchronization, Microsoft Teams link generation & OAuth identity | India / Global | ISO 27001, SOC 2, HIPAA, GDPR Compliant |
| Clerk Inc. | User authentication, session tokens, and multi-factor authentication (MFA) | United States / Global CDN | SOC 2 Type II, GDPR Compliant |
| Resend Inc. | Transactional email notification dispatch (booking confirmations and reminders) | United States | SOC 2 Type II, GDPR Compliant |
Looking for our contractual processing terms?Read the Data Processing Addendum (DPA) →