Annex III: List of subprocessors
Effective date: 21 May 2026
Source document: Zizr Data Processing Agreement
The following Subprocessors are engaged as of the effective date of this DPA. The current list is maintained at https://www.zizr.com/legal/subprocessors and updated in accordance with section 8 of this DPA.
| Subprocessor | Legal entity | Location of processing | Purpose | Transfer mechanism |
|---|---|---|---|---|
| Microsoft Azure | Microsoft Ireland Operations Ltd | France (France Central) | Cloud infrastructure, data storage, Azure OpenAI Service | EEA, no transfer |
| Cloudflare | Cloudflare, Inc. | Frankfurt, Germany | Network delivery, DDoS protection, web application firewall | EEA, no transfer |
| Datadog | Datadog, Inc. | Frankfurt, Germany | Logging, monitoring, error tracking | EEA, no transfer |
| ClickHouse (planned) | ClickHouse, Inc. | Frankfurt, Germany | Analytics database | EEA, no transfer |
| Postmark | ActiveCampaign LLC | United States | Transactional email | SCCs Module 3, supplementary measures |
| HubSpot | HubSpot, Inc. | United States | Support, CRM, merchant communications | SCCs Module 3, supplementary measures |
| Google Cloud / Vertex AI | Google LLC | United States | Large language model processing for product parsing | SCCs Module 3, supplementary measures |
OpenAI inference is performed via Azure OpenAI Service within the Microsoft Azure tenant and does not constitute a separate transfer to OpenAI Inc.