MAYA - AI Agent
Team Leader of AI Agents
Remediation Agent
Runs a dry run, waits for your approval, then fixes it
Evidence Collector
Collects your SOC 2, ISO 27001 and DPDP proof from the tools you already use
IP Scanner
Checks every public address for open ports, known CVEs and weak TLS
DAST (Public + Private)
Tests your APIs for 300+ vulnerability classes, inside and outside the network
CSPM
1,000+ checks across AWS, Azure and Google Cloud, mapped to your frameworks
Cloud Cost Optimization
Rightsizing and idle detection - customers cut cloud spend 28% on average
Integrations
20+ Integrations with your favorite tools
Asset Management
Finds vulnerabilities on your laptops and servers
ECR Container Image Scanning
Scans every ECR image for CVEs before it reaches production
Cloud Security
Keeping AWS, GCP and Azure locked down
AI Governance
Using AI at work without losing control of it
Data Privacy
DPDP, GDPR and looking after personal data
GRC
Audits, controls and staying ready for them
FinOps
Spending less on cloud without breaking things
API Security
Finding holes in your APIs before anyone else
Sub-processors & DPA
Who we share data with to run the service, and how to get a signed Data Processing Agreement for your organization.
Introduction
A sub-processor is a third party we use to help deliver the Dedups service, that may process personal data on our behalf. This page lists our current sub-processors, alongside our Privacy Policy, so you always know who touches your data and why.
We only work with sub-processors under a contract that requires them to protect your data at least as strictly as we do, and we never let a sub-processor use your data for their own purposes.
Our Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, compute, storage, and database infrastructure | India (default) or your chosen region for enterprise custom deployments |
| OpenAI | AI-assisted features - remediation suggestions and AI Scrum Master ticket replies | United States |
| Payment processor | Billing and subscription payment processing | Varies by processor |
| Transactional email provider | Sending account, security, and notification emails | Varies by provider |
If you connect your own AWS, Microsoft, Slack, Jira, or similar accounts to Dedups, those are your integrations, not our sub-processors - you control that connection and can disconnect it at any time from your account settings.
Safeguards We Require
Every sub-processor on this list is required to:
- Process data only to provide the specific service we've engaged them for
- Apply security controls (encryption in transit and at rest, access controls) consistent with our own
- Never sell or use your data for their own advertising or model training beyond what their own terms disclose (see our AI Processing note for OpenAI specifically)
- Notify us of a security incident so we can meet our own breach notification obligations
Requesting a DPA
If your organization needs a signed Data Processing Agreement (DPA) as part of your vendor security review, email legal@dedups.ai with your company name and we will send you our standard DPA for signature.
Our DPA covers the same commitments as this page - the roles of data fiduciary/controller and data processor, the sub-processors above, security measures, breach notification timelines, and data return or deletion at the end of your subscription.
Changes to This List
We may add or replace a sub-processor as our service evolves. For material changes - a new sub-processor with access to personal data - we will update this page and, for enterprise customers with a signed DPA, notify you by email in advance where our agreement requires it.
Contact Us
Questions about a sub-processor, or need a DPA? Reach out.