Sub-Processors
Last updated: May 24, 2026
1. General Sub-Processors
The following sub-processors support the core Orangescrum platform and are used in the regular course of providing our services to all customers.
| Sub-Processor | Purpose / Category | Entity / Location | Data Region |
|---|---|---|---|
| Cloud Hosting & Infrastructure | |||
| Amazon Web Services (AWS) | Cloud hosting, storage, compute, and infrastructure services for the Orangescrum application and customer data. | Amazon Web Services, Inc. United States | US Region |
| Email & Notification Delivery | |||
| SendGrid | Transactional email delivery (account, system, and notification emails). | Twilio Inc. United States | Global |
| Brevo | Marketing communications and notification email delivery. | Sendinblue SAS France, EU | EU |
| Flodesk | Email marketing campaigns and newsletter delivery. | Flodesk, Inc. United States | Global |
| Payment Processing | |||
| Stripe | Subscription billing and payment card processing. | Stripe, Inc. United States | Global |
| Braintree (PayPal) | Payment card and PayPal transaction processing. | PayPal, Inc. United States | Global |
| Razorpay | Payment processing for customers in India and supported markets. | Razorpay Software Pvt. Ltd. India | India |
| Customer Support & Helpdesk | |||
| TAWK | In-app live chat and customer support messaging. | tawk.to inc. United States | Global |
| Orangescrum | Internal ticketing, helpdesk workflow, and customer support case management. | Orangescrum (Andolasoft Inc.) United States / India | US / India |
| Analytics, Monitoring & Security | |||
| Anthropic | AI-powered features, in-product assistance, monitoring of AI service quality and safety. | Anthropic, PBC United States | US Region |
| Google LLC | Product analytics, performance monitoring, and security event logging. | Google LLC United States | Global |
2. Feature-Specific Sub-Processors
The following sub-processors are engaged only when customers enable or use specific features of the Orangescrum service. If you do not use the related feature, your data is not shared with these sub-processors.
| Sub-Processor | Feature | Purpose | Entity / Location |
|---|---|---|---|
| Amazon Web Services (AWS) | File Attachments & Backups | Object storage for uploaded files, attachments, and encrypted backups when enabled by the customer. | Amazon Web Services, Inc. United States |
| Anthropic | AI Assistant / Smart Suggestions | Processes prompts and limited project context to generate AI summaries, task suggestions, and replies when the AI feature is used. | Anthropic, PBC United States |
| Google LLC | Google Sign-In, Calendar & Drive Integration | OAuth-based authentication, calendar event sync, and Drive file linking when the integration is enabled. | Google LLC United States |
| Apple Inc. | Sign in with Apple & iOS Push Notifications | OAuth authentication via Apple ID and delivery of push notifications to the Orangescrum iOS mobile application via APNs. | Apple Inc. United States |
3. Affiliate Group Companies
Orangescrum is operated by Andolasoft Inc. and its affiliated group entities. Members of the Orangescrum group act as sub-processors for one another to provide consistent global support, development, and operations.
| Entity | Role | Location |
|---|---|---|
| Andolasoft Inc. | Parent entity - platform operations, support, and engineering. | United States |
| Andolasoft Pvt. Ltd. | Engineering, R&D, and Tier-1/Tier-2 customer support. | India |
4. Updates to this List
We may update this list from time to time as our sub-processors change. When we add a new sub-processor or replace an existing one, we will update this page at least 30 days in advance of the change taking effect, where required by applicable Data Processing Agreements.
Customers may subscribe to notifications of changes to this page by emailing privacy@orangescrum.com with the subject line "Subscribe - Sub-Processor Updates".
5. Objection Rights
Customers who have signed a Data Processing Agreement with Orangescrum may object in writing to the appointment of a new sub-processor within 30 days of notice, on reasonable data-protection grounds. In such cases, we will work in good faith with the customer to address the objection, including, where appropriate, offering an alternative or allowing the customer to terminate the affected service.
Contact Us
For questions about our sub-processors, the Data Processing Agreement, or our privacy practices:
Data Protection Officer
Orangescrum (Andolasoft Inc.)
Email: privacy@orangescrum.com
Web: www.orangescrum.com