Subprocessors
Last updated: 2026-10-07
Zyverna, Inc. uses the following third-party subprocessors to deliver the Zyverna Service. Each is bound by a written data processing agreement that requires appropriate security measures and prohibits use of Customer Content for its own purposes, including model training.
We will update this page at least 30 days before adding a new subprocessor that processes Customer Personal Data. To receive email notifications of changes, write to [email protected] with the subject "Subprocessor updates".
Infrastructure and hosting
| Subprocessor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Vercel, Inc. | Application hosting, edge network, serverless compute | United States (EU region available) | SCCs, DPF |
| Amazon Web Services, Inc. | Object storage, databases, sandboxes, backups | United States (us-east-1), EU (eu-central-1) on request | SCCs, DPF |
| Cloudflare, Inc. | DNS, DDoS protection, WAF, TLS termination | Global edge; US headquarters | SCCs, DPF |
AI model providers
| Subprocessor | Purpose | Location | Retention | Transfer mechanism |
|---|---|---|---|---|
| OpenAI, LLC | Large language model inference for chat, agent and API | United States | Zero data retention (Privacy Mode) / up to 30 days abuse monitoring | SCCs, DPF |
Prompts and context sent to model providers are used solely to generate a response. Providers are contractually prohibited from training on this data.
Payments and billing
| Subprocessor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Stripe, Inc. (and Stripe Payments Europe, Ltd.) | Payment processing, invoicing, tax calculation, fraud prevention | United States, Ireland | SCCs, DPF |
Stripe acts as an independent controller for certain fraud-prevention and regulatory activities. See Stripe's Privacy Policy.
Communications and support
| Subprocessor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Resend, Inc. | Transactional email (receipts, security alerts, magic links) | United States | SCCs |
| Plain Technologies, Inc. | Customer support ticketing | United States / EU | SCCs |
Analytics and monitoring
| Subprocessor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| PostHog, Inc. | Product analytics (consent-based; no code content) | EU (Frankfurt) | N/A (EU hosting) |
| Sentry (Functional Software, Inc.) | Error and performance monitoring (scrubbed of code content and PII) | United States (EU region available) | SCCs, DPF |
Identity
| Subprocessor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Google LLC, GitHub, Inc., Microsoft Corporation | Optional single sign-on (only if you choose to sign in with them) | United States | SCCs, DPF |
Affiliates
Zyverna, Inc. currently has no affiliates that process Customer Personal Data.
Change log
| Date | Change |
|---|---|
| 2026-10-07 | Initial publication |
Questions: [email protected]. Related: Privacy Policy · Data Processing Addendum · Security