Sub-processors

Cloud hosting and infrastructure

• Amazon Web Services — Mumbai (ap-south-1). Compute, managed database, and document storage for the platform. All customer data is hosted here.

Document extraction

• Docusift (operated by Ekarche Private Limited) — extracts fields from the supplier and import documents you upload, so they can be presented as drafts for you to confirm. Documents may contain counterparty names, GSTINs, and amounts. Bound by a written data-processing agreement with Lekha.

E-invoicing

• IRIS Business Services — the authorised Invoice Registration Portal / GST Suvidha Provider through which e-invoice registration happens. When an e-invoice is issued, Lekha submits the invoice payload to IRIS, which registers the Invoice Reference Number (IRN) and returns the signed QR. Lekha is not itself the IRP. Data sent is limited to invoice fields — GSTINs, invoice number and date, HSN/SAC, line amounts, tax split, place of supply. No bank or card details are sent, because payment moves outside the platform.

Transactional email

• Transactional email provider — sends service emails such as sign-up verification, OTP, password reset, invitations, and invoice delivery. Receives the recipient email address and message body.

Error monitoring

• Error monitoring (Sentry) — enabled at our discretion to capture crash and error reports that help us keep the service reliable. Personal data is stripped before reports are sent. When disabled, no data leaves the platform to this provider.

Payments

None. Lekha subscriptions are paid by direct bank transfer (UPI / IMPS / NEFT) into the Ekarche current account named on the invoice. We use no payment gateway, aggregator, or card processor, and we never handle or store your card or bank credentials. See terms for billing and refund + cancellation.