Legal
Subprocessors
Third-party service providers that process data on behalf of Zof AI.
Last updated: December 2024
Subprocessor Updates
Zof AI will provide at least 30 days advance notice before engaging a new sub-processor, allowing customers time to review and raise objections if necessary.
Current Sub-Processors
The following sub-processors are currently engaged to help deliver Zof AI services.
Amazon Web Services (AWS)
United States
Cloud infrastructure and hosting
All customer data for service delivery
Google Cloud Platform
United States / EU
Cloud infrastructure (select regions)
Customer data for EU data residency
Stripe
United States
Payment processing
Billing information, payment methods
Snowflake
United States
Data warehousing and analytics
Aggregated usage analytics
Datadog
United States
Infrastructure monitoring
System logs, performance metrics
PagerDuty
United States
Incident management
Alert metadata
Intercom
United States
Customer support and messaging
User contact information, support tickets
Segment
United States
Customer data platform
Product usage analytics
SendGrid (Twilio)
United States
Email delivery
Email addresses, notification content
Cloudflare
United States / Global
CDN, DDoS protection, DNS
Traffic metadata, IP addresses
Auth0 (Okta)
United States
Identity and authentication
User credentials, authentication data
GitHub
United States
Source code integration
Repository metadata (optional)
Data Transfer Mechanisms
Data transfers to sub-processors outside the EEA are governed by the following mechanisms.
- Standard Contractual Clauses (SCCs) EU-approved data transfer clauses
- Data Privacy Framework (DPF) For certified US companies
- Binding Corporate Rules (BCRs) Where applicable
Subprocessor Due Diligence
Before engaging any sub-processor, Zof AI conducts thorough due diligence.
- Security certification verification (SOC 2, ISO 27001, etc.)
- Data processing agreement review and execution
- Privacy impact assessment where applicable
- Ongoing monitoring of sub-processor security practices and compliance status.
Notification Process
We notify customers of changes to our sub-processor list through the following process.
- 1Updated sub-processor list published on this page.
- 2Email notification sent to subscribed contacts.
- 330-day notice period before the new sub-processor begins processing data.
- 4Objection mechanism available during the notice period.
Subscribe to Updates
Enter your email address to receive notifications when our sub-processor list is updated. privacy@zof.ai
Questions
For questions about our subprocessors or data processing practices, contact our Data Protection Team at dpo@zof.ai.