In short: We use a small number of service providers under data protection contracts. Customers can request the named list; we notify customers before adding a new subprocessor that processes their data.
1. Categories
- Cloud hosting and content delivery — global edge network; application hosting planned in India (Mumbai) for Indian customers.
- Database and file storage — India (Mumbai region).
- Email delivery — transactional and product emails.
- AI model providers — only when ZI features use a model; zero data retention requested and terms that prohibit training on our data.
- Messaging and telephony carriers — to deliver SMS, WhatsApp and calls you send through ZiReach.
- Payment processing — Razorpay (India) and Paddle (merchant of record in some regions).
- Error monitoring and product analytics — only where enabled, with minimised data.
2. Why we don't list every vendor publicly
ZiReach is model- and provider-neutral and routes work between providers. Customers and prospective customers can request the current named list with regions, under our data processing terms, by writing to grievance@zireach.com.
3. Changes
We tell business customers before a new subprocessor starts processing their data, so they can object.