Legal

Sub-Processors

Last updated: May 24, 2026

To support delivery of the Orangescrum service, we engage trusted third-party companies (sub-processors) to process customer data on our behalf. This page lists our current sub-processors along with the category of services they provide. We carry out due diligence on every sub-processor and enter into Data Processing Agreements that bind them to data protection obligations no less protective than those in our customer agreements.

1. General Sub-Processors

The following sub-processors support the core Orangescrum platform and are used in the regular course of providing our services to all customers.

Sub-ProcessorPurpose / CategoryEntity / LocationData Region
Cloud Hosting & Infrastructure
Amazon Web Services (AWS)Cloud hosting, storage, compute, and infrastructure services for the Orangescrum application and customer data.Amazon Web Services, Inc.
United States
US Region
Email & Notification Delivery
SendGridTransactional email delivery (account, system, and notification emails).Twilio Inc.
United States
Global
BrevoMarketing communications and notification email delivery.Sendinblue SAS
France, EU
EU
FlodeskEmail marketing campaigns and newsletter delivery.Flodesk, Inc.
United States
Global
Payment Processing
StripeSubscription billing and payment card processing.Stripe, Inc.
United States
Global
Braintree (PayPal)Payment card and PayPal transaction processing.PayPal, Inc.
United States
Global
RazorpayPayment processing for customers in India and supported markets.Razorpay Software Pvt. Ltd.
India
India
Customer Support & Helpdesk
TAWKIn-app live chat and customer support messaging.tawk.to inc.
United States
Global
OrangescrumInternal ticketing, helpdesk workflow, and customer support case management.Orangescrum (Andolasoft Inc.)
United States / India
US / India
Analytics, Monitoring & Security
AnthropicAI-powered features, in-product assistance, monitoring of AI service quality and safety.Anthropic, PBC
United States
US Region
Google LLCProduct analytics, performance monitoring, and security event logging.Google LLC
United States
Global

2. Feature-Specific Sub-Processors

The following sub-processors are engaged only when customers enable or use specific features of the Orangescrum service. If you do not use the related feature, your data is not shared with these sub-processors.

Sub-ProcessorFeaturePurposeEntity / Location
Amazon Web Services (AWS)File Attachments & BackupsObject storage for uploaded files, attachments, and encrypted backups when enabled by the customer.Amazon Web Services, Inc.
United States
AnthropicAI Assistant / Smart SuggestionsProcesses prompts and limited project context to generate AI summaries, task suggestions, and replies when the AI feature is used.Anthropic, PBC
United States
Google LLCGoogle Sign-In, Calendar & Drive IntegrationOAuth-based authentication, calendar event sync, and Drive file linking when the integration is enabled.Google LLC
United States
Apple Inc.Sign in with Apple & iOS Push NotificationsOAuth authentication via Apple ID and delivery of push notifications to the Orangescrum iOS mobile application via APNs.Apple Inc.
United States

3. Affiliate Group Companies

Orangescrum is operated by Andolasoft Inc. and its affiliated group entities. Members of the Orangescrum group act as sub-processors for one another to provide consistent global support, development, and operations.

EntityRoleLocation
Andolasoft Inc.Parent entity - platform operations, support, and engineering.United States
Andolasoft Pvt. Ltd.Engineering, R&D, and Tier-1/Tier-2 customer support.India

4. Updates to this List

We may update this list from time to time as our sub-processors change. When we add a new sub-processor or replace an existing one, we will update this page at least 30 days in advance of the change taking effect, where required by applicable Data Processing Agreements.

Customers may subscribe to notifications of changes to this page by emailing privacy@orangescrum.com with the subject line "Subscribe - Sub-Processor Updates".

5. Objection Rights

Customers who have signed a Data Processing Agreement with Orangescrum may object in writing to the appointment of a new sub-processor within 30 days of notice, on reasonable data-protection grounds. In such cases, we will work in good faith with the customer to address the objection, including, where appropriate, offering an alternative or allowing the customer to terminate the affected service.

Contact Us

For questions about our sub-processors, the Data Processing Agreement, or our privacy practices:

Data Protection Officer

Orangescrum (Andolasoft Inc.)

Email: privacy@orangescrum.com

Web: www.orangescrum.com