About this list
These are the outside services that receive or handle personal data when they work for the platform run by ABIR Institute for Arbitration LLP. Each one handles data only to provide its service to us. How we use the data, and your rights, are explained in the Privacy Notice.
The Client in a case, the arbitrators and the other parties are not on this list. They are not our service providers. They receive case data because the arbitration requires it (see who receives your data).
Our core data is stored in India (Microsoft Azure, Central India). Several providers below process some data outside India. The “Where” column says so for each one, based on what the provider publishes.
Providers in use
| Provider | What it does for us | Personal data it receives | Where | Status | Their terms |
|---|---|---|---|---|---|
| Microsoft Azure | Hosts the database, the backend services, the document storage, the encryption keys, our logs and the locked store for daily audit fingerprints | All platform data | India: Central India (Pune) | In use | Microsoft Privacy Statement |
| Azure Communication Services (Microsoft) | Sends every email: notices, sign-in mail and account mail | Email address, name, the message and its attachments; delivery reports | India is the data location for the service. Microsoft says data may transit other regions. Delivery reports pass through a global Microsoft event service. | In use | Azure Communication Services privacy |
| CallMissed | Sends WhatsApp notices and sign-in codes and reports their delivery status. Turns speech into text when staff enter a reply for a respondent (assisted entry). Can also act as the gateway for AI assistance if that is switched on. | Mobile number, message content and notice link or PDF, delivery status; audio for assisted entry; masked text for AI assistance | CallMissed says its main systems run on Azure Central India. Some of its partners may process limited data outside India. | In use (AI gateway: optional) | CallMissed privacy policy |
| Meta Platforms (WhatsApp Cloud API), through CallMissed | Carries WhatsApp messages to the recipient | Mobile number, message content and attachments | Meta data centres, which may be outside India. Meta may keep messages for up to 30 days. | In use | WhatsApp Cloud API data privacy |
| Cloudflare | Delivers every page of the site, the respondent portal and the staff screens, and passes requests to our backend | IP address, browser details, the pages and data passing between you and us | Cloudflare’s global network, which may be outside India | In use | Cloudflare privacy policy |
| Cloudflare RealtimeKit | Runs live video hearings and, only when the arbitrator starts one, records them | Audio, video and display name of each participant; recordings | Media goes through the nearest Cloudflare data centre. Recordings stay in the provider’s storage for up to 7 days; we keep our copy in Azure, Central India. | In use | RealtimeKit recording guide |
| Cloudflare Turnstile | Bot check shown on sign-in and password-reset pages after repeated failed attempts | IP address, browser and connection signals | Cloudflare’s global network | In use when switched on | Turnstile privacy addendum |
| Cloudflare Web Analytics | Counts page views on the live site, without cookies | Page address and request data, not linked to a person | Cloudflare, outside India. Raw data kept for 7 days. | In use | Web Analytics FAQ |
| Cloudflare R2 (old storage) | Holds the copy of documents uploaded before we moved storage to Azure on 4 October 2026 | Documents in cases started before that date | Not held in India | Being retired: to be deleted once the move is fully checked | Cloudflare privacy policy |
| Sign in with Google for staff. Hosts our mailbox for the support, grievance and privacy addresses. Serves fonts on hearing pages. | Name, email and Google account identifier (sign-in); anything you email us; IP address (fonts) | Google, outside India. Google Workspace has no India data region. | In use | Google privacy policy |
Optional providers
These are used only when switched on. If one is switched on, this page will show it as in use.
| Provider | What it does for us | Personal data it receives | Where | Status | Their terms |
|---|---|---|---|---|---|
| Anthropic | AI model that helps staff draft and summarise. Identifiers are masked before any text is sent, and a person reviews every result. | Masked case text | Processed outside India; stored in the United States | Optional: used only when switched on | Anthropic privacy policy |
Built but not in use
The platform can connect to these providers, but none is in use. We will list each one as in use here before it receives any personal data.
| Provider | What it does for us | Personal data it receives | Where | Status | Their terms |
|---|---|---|---|---|---|
| MSG91 | SMS notices | Mobile number, message | India | Not in use. No SMS provider is live yet. | — |
| Zoho Sign (India data centre) | Certified electronic signatures on awards | Signer name and email, the document | India | Not in use | — |
Other services
- Postal and courier services in India receive the name and address on each envelope they deliver. The Client posts the S.21 notice itself. We post the notices that must go by post, such as the final notice and the signed award.
- Pwned Passwords (Have I Been Pwned, served through Cloudflare) checks whether a new password has appeared in a known breach. Only the first five characters of a one-way hash of the password leave our servers, so it receives no personal data.
- Our logs and monitoring stay inside our own Azure environment in Central India.
Changes and questions
We update this page before a new provider receives personal data, and when a provider is retired. The date at the top shows the last change. Questions: support@abirnyayasetu.com.
Nyaya Setu, ABIR Institute for Arbitration LLP (LLPIN ADC-7008), Registered office: Flat 402, Suryavandan Apt, Rokdoba Mandir, Shivajinagar, Haveli, Pune 411005, Maharashtra, India