[SiteSecura PVT LTD], doing business as SiteSecura ("SiteSecura", "we", "us", or "our") engages selected third-party service providers to deliver essential platform functions, including user authentication, payment processing, network security, and cloud hosting.
This page identifies key external service providers and explains the specific operational purposes for which they process data on our behalf.
1. What is a Subprocessor?
A subprocessor is a third-party service provider engaged by SiteSecura to assist in delivering aspects of the Service to our customers. Depending on the service provided, an external provider may process limited customer data on our behalf or operate as an independent infrastructure provider.
We do not sell personal data, and we restrict third-party access strictly to information necessary to fulfill their specific service functions.
2. Authorized Provider Inventory
The table below lists the active third-party services utilized in the SiteSecura production environment:
| Provider / Entity | Operational Purpose | Potential Data Processed | Service Role |
|---|---|---|---|
| Firebase Authentication Google LLC | User authentication, session tokens, and identity verification | Name, email address, authentication identifiers, sign-in timestamps | Authentication Provider |
| Stripe Stripe, Inc. | Subscription billing, invoicing, and PCI-compliant payment gateway | Customer ID, subscription ID, billing plan, payment status (card details handled directly by Stripe) | Payment Processor |
| Cloudflare Cloudflare, Inc. | Reverse proxy, CDN edge caching, DNS routing, and DDoS mitigation | Network request headers, client IP addresses, edge traffic telemetry | Infrastructure & Security Provider |
| Transactional Email Service SMTP / Delivery Gateway | Dispatch of automated security alerts, SSL expiry notices, and system communications | Recipient email address, notification content, message delivery metadata | Communication Provider |
| AI Inference Services Groq Inc. & Google Gemini | AI Security Advisor explanations and technical remediation guidance (Pro & Agency plans) | Anonymized security finding titles and technical observation metadata | AI Service Provider |
| Cloud Infrastructure Hosting & Compute Providers | Application hosting, PostgreSQL databases, Redis queues, and task workers | Platform application data, scan history records, and encrypted system databases | Core Hosting Provider |
3. Authentication Services
SiteSecura utilizes Firebase Authentication to securely manage user registration, identity verification, password resets, and session credential validation.
Authentication data is processed in accordance with Google's data privacy standards. Passwords are never exposed to or stored by SiteSecura in raw form.
4. Payment Processing Services
Subscription billing and checkout sessions are operated via Stripe. Stripe acts as an independent data controller for payment card handling under PCI-DSS Level 1 certification.
SiteSecura maintains only Stripe customer tokens and subscription status references to manage plan entitlements; raw payment card numbers never traverse or reside on SiteSecura servers.
5. Data Minimization & Sharing
We adhere to strict data minimization principles. Subprocessors receive only the technical information reasonably necessary to deliver their respective services.
The precise data exchanged depends on the features and subscription tier utilized. For example, customers on plans without AI features enabled do not transmit finding data to AI inference providers.
6. Provider Updates
As SiteSecura expands and optimizes platform performance, we may add, retire, or replace third-party providers. When material changes occur, this inventory will be updated accordingly with a revised "Last Updated" date.
7. Inquiries & Contact
If you have questions regarding third-party subprocessors or data handling practices:
Entity: [SiteSecura]
Privacy & Compliance Inquiries: [legal@sitesecura.com]
Registered Address: [Indore, Madhya Pradesh]