Third-Party Vendors & Infrastructure
Proposed Sub-processors
DRAFTLast Updated: October 8, 2026•Specification v1.1•ZTICOM Tech Ltd
Proposed providers — this is not a verified active sub-processor register. Vendor security review status, data processing agreements, and retention terms are pending until deployment and contracts are finalized. See the Trust Center for provider handling details.
| Sub-processor | Proposed Processing Purpose & Retention Scope | Entity Location | Transfer Safeguard |
|---|---|---|---|
| Amazon Web Services (AWS) | Proposed: cloud infrastructure hosting, VPC networking, managed PostgreSQL, S3 object storage. | United States / European Union (Frankfurt, Dublin) | Pending agreed transfer mechanism (e.g. SCCs) |
| Anthropic PBC | Proposed: stateless foundation model reasoning inference (Claude family). Retention terms pending provider contract. | United States | Pending agreed transfer mechanism (e.g. SCCs) |
| OpenAI LLC | Proposed: stateless foundation model reasoning inference (GPT family). Retention terms pending provider contract. | United States | Pending agreed transfer mechanism (e.g. SCCs) |
| Google Cloud Platform (GCP) | Proposed: stateless foundation model reasoning inference (Gemini family). Retention terms pending provider contract. | United States / European Union | Pending agreed transfer mechanism (e.g. SCCs) |
| HashiCorp / HCP | Proposed: managed secret storage, credential encryption, and OAuth token vaulting. | United States / European Union | Pending agreed transfer mechanism (e.g. SCCs) |
| Datadog / OpenTelemetry | Proposed: platform telemetry, application tracing, and system health monitoring (scrubbed of PII where feasible). | United States / European Union | Pending agreed transfer mechanism (e.g. SCCs) |
Sub-processor Update Notifications
Advance notification periods for Sub-processor changes will be defined in the executed Data Processing Addendum. You may register interest in receiving notifications via the contact below.