Sub-processors
Last updated: April 2026. We'll notify customers 30 days before adding or materially changing a sub-processor.
Zobrx uses the third-party services below to deliver the Zobrx platform. Each carries a Data Processing Agreement (DPA), Standard Contractual Clauses where applicable, and a SOC 2 or ISO 27001 certification (or equivalent).
Infrastructure
| Sub-processor | Purpose | Region | Data categories |
|---|
| Amazon Web Services (AWS) | Hosting, storage, encryption, networking | US, EU (Frankfurt), UK, APAC (Singapore), India (Mumbai) | All customer data |
| Google Cloud Platform (GCP) | BigQuery warehouse (optional reverse-ETL sink) | Customer-selected region | Analytics data (Scale+ opt-in) |
| Vercel | Static site hosting for zobrx.com | Global edge network | Marketing site metadata only |
AI & Model providers
| Sub-processor | Purpose | Region | Data categories |
|---|
| Groq, Inc. | Llama 3.1 70B inference for AI Advisor | US | Prompt text, metric snippets (no-retention contract) |
| Google LLC (Gemini API) | Gemini 2.5 Pro reasoning and vision | US, EU (customer-selected) | Prompt text, creative assets (no-retention contract) |
| Google LLC (Vertex AI) | Imagen 4 image gen, Veo 2 video gen | Customer-selected region | Creative prompts and generated assets |
Identity & access
| Sub-processor | Purpose | Region | Data categories |
|---|
| WorkOS, Inc. | SSO (SAML/OIDC), SCIM provisioning, Directory Sync, Audit Logs | US | Authentication events, user directory metadata |
Payments & billing
| Sub-processor | Purpose | Region | Data categories |
|---|
| Stripe, Inc. | Global subscription billing, tax calculation | US, EU, IN | Billing contact, payment method tokens |
| Razorpay Software Pvt. Ltd. | Indian subscription billing (UPI AutoPay, eNACH) | India (Mumbai) | Indian billing contact, payment mandates |
| Cashfree Payments India Pvt. Ltd. | Secondary India payment gateway | India | Failover billing transactions |
Tax & invoicing
| Sub-processor | Purpose | Region | Data categories |
|---|
| ClearTax (Defmacro Software Pvt. Ltd.) | IRN e-invoicing (India GST) | India | Invoice-level fields required for IRN |
Messaging & email
| Sub-processor | Purpose | Region | Data categories |
|---|
| SendGrid (Twilio Inc.) | Transactional email delivery | US | Email addresses, subject, body |
| Meta Platforms, Inc. | WhatsApp Cloud API, Messenger API, Instagram API | Region-aware routing | Conversation content, recipient metadata |
Observability & security
| Sub-processor | Purpose | Region | Data categories |
|---|
| Panther Labs, Inc. | SIEM / audit-log analysis | US | Security events, audit log metadata |
| Grafana Labs | Observability (metrics, traces, logs) | EU / US (customer-selected) | Infrastructure telemetry, no customer data |
| Drata Inc. | Compliance automation (SOC 2 evidence collection) | US | Control evidence metadata |
Support
| Sub-processor | Purpose | Region | Data categories |
|---|
| Intercom, Inc. | In-app support chat and help center | US, EU (customer-selected) | Support conversation content |
Subscribe to updates
We email the tenant admin 30 days before adding or changing a sub-processor. You can also follow this page — it's indexed in our sitemap and updated with every change.
Questions: privacy@zobrx.com
