Sub-processors & Security
This page lists the third-party services (“sub-processors”) that AnswerMonk relies on to run AI-visibility audits, the data we share with each one, and the steps we take to keep that data secure.
Overview
AnswerMonk is operated by Dreamport Technology Private Limited, an Indian company. To provide an audit, we share limited data with the vetted sub-processors listed below — for example, running your buyer prompts against ChatGPT and pulling search and backlink data for the domains you ask us to check. We share only what each sub-processor needs to perform its function, we use these vendors under their standard data-processing and security terms, and we do not sell personal data.
This list is maintained alongside our Privacy Policy, which explains what we collect, why, and the choices you have.
Sub-processors
AnswerMonk uses the following sub-processors. Each row shows what the service does for us, the data we share with it, and the region where it processes that data.
| Sub-processor | Purpose | Data shared | Region |
|---|---|---|---|
| OpenAI | AI answer scoring (ChatGPT engine) | Audit prompts / queries | United States |
| Anthropic | Report insight generation (Claude model) | Recorded citation data | United States |
| Google (Gemini, Search Console, Analytics, Tag Manager) | Report insight generation fallback (Gemini model), optional OAuth analytics and product analytics | Recorded citation data (Gemini); site usage data (Analytics / Tag Manager). Search Console and GA4 data travels from your Google account to AnswerMonk — we send none of it back out | United States / Global |
| SerpAPI | Search-results (SERP) data | Target keywords and domains | United States |
| DataForSEO | Backlink & SEO data | Target domains | United States / EU |
| Railway | Application hosting & PostgreSQL database | All service data at rest, including any connected Google Search Console / GA4 data | United States / Global |
Connected Google data. If you connect Google Search Console or Google Analytics 4, the only sub-processor above that receives that data is Railway, which stores it as our hosting provider. It is never sent to the AI engines (OpenAI, Anthropic, Google Gemini) or to the search and SEO data vendors listed above, never used to train any AI or machine-learning model, and never sold or transferred for advertising. See Google user data in our Privacy Policy for the full statement.
Billing is handled by our third-party payment processor. Any card details are entered directly with that processor at checkout — AnswerMonk does not receive or store full card numbers.
Security practices
We aim to be honest rather than impressive about security. AnswerMonk does not hold formal certifications such as SOC 2 or ISO 27001; the following describes the concrete measures we actually apply.
- Encryption in transit. Traffic to AnswerMonk and between our service and its sub-processors is served over HTTPS/TLS.
- Access controls and least privilege. Access to production systems and stored data is limited to the people who need it, and each is granted only the permissions their role requires.
- Connected Google accounts. When you connect Search Console or Analytics, the OAuth tokens are encrypted at rest with AES-256-GCM and used strictly read-only — to fetch the reports you asked us to read. We do not write to, or change, your connected accounts, and you can revoke access at any time from your Google account.
- Regular dependency updates. We keep application dependencies current and apply security-relevant updates as part of ongoing maintenance.
- Managed infrastructure. The application and its database are hosted on managed infrastructure (Railway), so the underlying servers, networking and storage are maintained by that provider.
Where data is processed
Your data is processed in India by Dreamport Technology Private Limited, and by the sub-processors listed above — several of which process data in the United States and other regions. By using AnswerMonk you understand that your data may be transferred to and processed in those locations. We share data with these vendors only to deliver the audit and run the service.
Reporting a security issue
If you believe you have found a security vulnerability or a data-handling problem, please email [email protected] with enough detail for us to reproduce it. We take reports seriously and will acknowledge and investigate promptly. Please do not publicly disclose an issue before we have had a reasonable chance to address it.
Changes to this list
As the product evolves we may add, replace or remove sub-processors. When we make a material change to this list, we will update the page and the “Last updated” date shown above. We encourage you to check back periodically; continued use of AnswerMonk after a change means the updated list applies.
Contact
Questions about this page, our sub-processors, or how your data is handled? Email [email protected] or use our Contact page.
Dreamport Technology Private Limited
CIN: U78100RJ2025PTC104714
72 Mangal Vihar (MCL), Scheme No. 5, Bhoggore, Alwar, Rajasthan – 301001, India
Email: [email protected]
See also our Privacy Policy for what we collect and the choices available to you.
Last updated 2026-08-15.