Third-party service providers that process data on behalf of Fininvo and our customers
February 28, 2026
March 1, 2026
1.0
You will be notified 30 days in advance of any new sub-processor additions.
This Sub-processor List is published by Fininvo, a trade name of Prashbi Global Services Pvt. Ltd., a company incorporated under the laws of India (CIN: U52100KA2020PTC133490), with its registered office at Tholons Tower, 346 HIG, 17th Cross Rd, Dollars Colony, R.M.V. 2nd Stage, Bengaluru, Karnataka 560094, India. References to "Fininvo", "we", "us", or "our" in this document refer to Prashbi Global Services Pvt. Ltd..
A sub-processor is a third-party service provider engaged by Fininvo to process personal data on behalf of our customers. As a data processor, Fininvo is committed to full transparency regarding the sub-processors we engage to deliver our services.
We carefully vet each sub-processor to ensure they meet our stringent security, privacy, and compliance standards. Every sub-processor is bound by contractual obligations that provide the same level of data protection as our own Data Processing Agreement (DPA).
GDPR Article 28 Compliance: In accordance with Article 28 of the General Data Protection Regulation (GDPR), Fininvo maintains this list of sub-processors and provides prior notification to data controllers before engaging any new sub-processor or replacing an existing one.
All sub-processors are subject to annual security reviews and data protection impact assessments.
The following third-party service providers currently process data as part of Fininvo's service delivery:
| Provider | Service | Purpose | Data Location | Date Added |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud Infrastructure | Hosting, compute, storage | India (Mumbai), EU (Frankfurt), US (Virginia) | Jan 2024 |
| Stripe | Payment Processing | Subscription billing, payment processing | United States | Jan 2024 |
| Amazon SES | Email Service | Transactional email delivery | India (Mumbai) | Jan 2024 |
| Sentry | Error Monitoring | Application error tracking & performance | United States | Mar 2024 |
| Cloudflare | CDN & Security | Content delivery, DDoS protection | Global | Jun 2024 |
| Google Analytics | Analytics | Website usage analytics (anonymized) | United States | Jan 2024 |
Data Processing Agreements: Fininvo has executed Data Processing Agreements with each sub-processor listed above, ensuring contractual obligations for data protection, security measures, and breach notification.
Fininvo provides advance notice before engaging any new sub-processor or making material changes to existing sub-processor arrangements. Our notification process ensures you have adequate time to review and respond.
We provide a minimum of 30 days advance written notice before any new sub-processor begins processing personal data.
Notifications are sent via email to all designated DPA contacts and account administrators on file.
To receive sub-processor change notifications, ensure your DPA contact email is up to date in your account settings, or email dpo@fininvo.com to be added to the notification list.
Each notification includes the sub-processor name, services provided, data categories processed, data location, and security measures implemented. This page is also updated to reflect all current sub-processors.
We respect your right to review and object to the use of any new sub-processor. The following process ensures your concerns are addressed promptly and fairly.
You may object to any new sub-processor within 30 days of receiving notification by emailing dpo@fininvo.com with the subject "Sub-processor Objection".
Fininvo will make commercially reasonable efforts to address your objection, which may include offering an alternative sub-processor or modifying data flows.
Step 1: Submit your written objection to dpo@fininvo.com within 30 days of notification.
Step 2: Fininvo will acknowledge receipt within 5 business days and initiate a review.
Step 3: We will work with you to find a mutually acceptable resolution within 30 days.
Step 4: If no resolution is reached, you have the right to terminate the affected services at the end of your current billing cycle (monthly or annual) without incurring early termination fees. No refunds will be issued for the remaining period of the current billing cycle, in accordance with our Refund Policy.
Right to Terminate: If Fininvo is unable to reasonably address your objection and the new sub-processor is essential to service delivery, you may terminate the affected DPA and associated services with 30 days written notice. Termination takes effect at the end of your current billing cycle. All fees are non-refundable as per our Refund Policy.
The following infrastructure components are either self-hosted by Fininvo or deployed within customer-controlled environments. These are not third-party sub-processors as no personal data is shared with external parties through these services.
Event streaming and message brokering for real-time data processing.
Self-HostedIn-memory caching and session management for application performance.
Customer-Choice DeploymentPrimary relational database for all application data storage and retrieval.
AWS RDS ManagedNote: While PostgreSQL is hosted on AWS RDS (a managed database service), AWS is already listed as a sub-processor for cloud infrastructure. The database service does not introduce any additional third-party data processing beyond what is covered by our AWS sub-processor agreement.
Data Protection Officer
dpo@fininvo.comLegal Inquiries
legal@fininvo.comPhone
+91 9481306665CIN
U52100KA2020PTC133490
Registered Office
Prashbi Global Services Pvt. Ltd.
Tholons Tower, 346 HIG, 17th Cross Rd, Dollars Colony,
R.M.V. 2nd Stage, Bengaluru, Karnataka 560094, India