Subprocessors

Current Sub-Processors

The following sub-processors are currently engaged to help deliver Zof AI services.

Data Transfer Mechanisms

Data transfers to sub-processors outside the EEA are governed by the following mechanisms.

• Standard Contractual Clauses (SCCs) EU-approved data transfer clauses
• Data Privacy Framework (DPF) For certified US companies
• Binding Corporate Rules (BCRs) Where applicable

Subprocessor Due Diligence

Before engaging any sub-processor, Zof AI conducts thorough due diligence.

• Security certification verification (SOC 2, ISO 27001, etc.)
• Data processing agreement review and execution
• Privacy impact assessment where applicable
• Ongoing monitoring of sub-processor security practices and compliance status.

Notification Process

We notify customers of changes to our sub-processor list through the following process.

1. 1Updated sub-processor list published on this page.
2. 2Email notification sent to subscribed contacts.
3. 330-day notice period before the new sub-processor begins processing data.
4. 4Objection mechanism available during the notice period.

Subscribe to Updates

Enter your email address to receive notifications when our sub-processor list is updated. privacy@zof.ai

Questions

For questions about our subprocessors or data processing practices, contact our Data Protection Team at dpo@zof.ai.