Subprocessors and Service Providers

A Subprocessor processes Customer Personal Data on Zof’s behalf in delivering the contracted Services. A provider supporting Zof’s own website or business operations may have a different role. An integration that a customer chooses and contracts for directly also has to be evaluated under its own terms. These categories should not be treated as interchangeable.

The applicable platform register depends on the product features and deployment. Private infrastructure, customer-managed model endpoints, support access, telemetry, and backups can involve different providers. A supplier mentioned on a marketing page, an integration catalog, or a software dependency list is not automatically an authorized recipient of your data.

The website includes the integrations below. A feature’s provider is used when that feature is configured and invoked; this table does not assert that each integration is enabled for every request or in every environment. Provider contracting entities, locations, and platform authorization must be confirmed in the applicable processing register.

This table is intended to explain relevant website data flows and support a specific privacy inquiry. It does not extend a website vendor relationship to customer production data or establish a contractual transfer mechanism.

Send legal@zof.ai your organization, the service you are evaluating, deployment model, proposed data categories, required processing regions, and privacy contact. Before processing begins, the parties must document the authorized providers, register version and date, and how changes will be communicated. Include any restrictions on remote access, model providers, or onward transfers.

A useful review establishes the legal entity for each provider, its role, processing purpose, data categories, countries of processing and access, applicable transfer mechanism, and whether the provider is mandatory or feature-dependent. For customer-managed components, record who contracts with and instructs the provider. Do not infer these facts solely from a provider’s headquarters.

• Confirm where prompts, code, logs, outputs, and support artifacts can be sent.
• Confirm retention, model-training restrictions, deletion responsibilities, and backup handling.
• Confirm access by support personnel and the controls covering any remote access.
• Confirm that the authorized list and security schedule match the actual purchased deployment.

• Contact legal@zof.ai
• Data processing agreement

Subprocessor arrangements must provide the protections required by the applicable DPA and Data Protection Law. Review contractual confidentiality and purpose restrictions, appropriate security, incident cooperation, assistance, return or deletion, and restrictions on further processing. Zof’s responsibility for its Subprocessors follows the applicable DPA and law.

For a restricted international transfer, identify a legally valid mechanism and any necessary supplementary measures for the particular recipient and data flow. A supplier’s certification, an available data-center region, or a reference to standard clauses does not independently establish that every transfer is covered. Obtain the relevant documents rather than assuming Zof has its own Data Privacy Framework certification or Binding Corporate Rules.

Change notices, authorization, objection periods, and remedies are governed by the applicable DPA. The public DPA provides 30 days’ advance notice of intended additions or replacements under general authorization, unless an executed DPA specifies a different lawful process. Customers should designate and maintain a monitored privacy or procurement contact and record the agreed notification method.

To raise a data-protection objection, identify the proposed provider, the affected processing, and the specific concern. Zof and Customer can assess safeguards or feasible alternatives under the agreement. An objection does not by itself guarantee a particular substitute or remedy beyond the contract and applicable law.

Contact legal@zof.ai to confirm your notification contact or review the provider authorizations for your service. This page does not provide an automated subscription service or represent that entering an address elsewhere enrolls you in contractual subprocessor notices.

• Contact legal@zof.ai