Margin
SECURE PRODUCT EXPERIENCE
Preparing XZMargin…
Loading the next view with the same secure workspace experience.
SUBPROCESSORS
Know which external service providers may process data to operate XZMargin.
XZ BYTECORE uses specialised infrastructure and service providers to operate XZMargin. The providers below are based on the current production code and feature architecture; a provider processes customer data only when the relevant service or feature is used and configured.
Document status
Effective date: 16 September 2026
Operator: XZ BYTECORE PRIVATE LIMITED
If a signed customer agreement conflicts with this public policy, the signed agreement controls to the extent of that conflict.
Current service providers
- Vercel — application hosting, deployment, edge/network delivery and production web infrastructure.
- Neon — managed PostgreSQL database and related application-data infrastructure.
- Razorpay — payment and subscription processing when paid billing is enabled and used.
- Resend — transactional/report email delivery when email reporting is enabled and configured.
- Meta / WhatsApp Cloud API — WhatsApp report or utility-message delivery when the customer enables that communication channel and the integration is configured.
- AI model provider for the optional workspace assistant — when the assistant is enabled, the question and the workspace summary figures shown on the dashboard are sent to the configured provider to draft an explanation. Depending on configuration this is Vercel AI Gateway (which routes to the selected model vendor), OpenAI or Groq. The assistant does not perform the financial calculations; those are computed deterministically by XZMargin.
- Google Firebase Cloud Messaging — delivery of push notifications to the XZMargin Android app when the user enables notifications.
What subprocessors receive
A subprocessor should receive only the categories of information necessary for the feature it provides. For example, a payment provider should receive billing/payment information required for checkout, while an email-delivery provider may receive a recipient address and report-message content for an enabled delivery.
Optional features
Some listed providers may be present in the codebase but inactive until production credentials, customer settings or a paid feature are enabled. Listing a provider does not mean every customer’s data is sent to that provider.
Changes to the list
XZ BYTECORE may add, replace or remove providers as the service evolves. This page will be updated for material changes. Where a customer’s DPA or order form provides a specific advance-notice or objection right, that contractual process will apply.
Customer due diligence
Customers with security, residency, regulated-industry or procurement requirements should review the applicable provider terms and raise requirements before enabling a feature that depends on a specific provider.
Related documents
Privacy Policy · Terms of Service · Security · Legal & Trust Center