Effective Date: 1 January 2026
Zubu.AI, Inc. ("Zubu") uses the sub-processors listed below to process Customer Data on behalf of its customers. This page forms part of the Zubu Data Processing Addendum at https://www.zubu.ai/dpa (the "DPA"), and terms used here have the meanings given in the DPA.
Current sub-processors
| Sub-processor | Purpose | Customer Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting and infrastructure for the Services | Customer Hold Records, which are stored in Zubu's hosting environment. Customer Source Data only while it passes through that environment during a collection the customer directs; it is not retained | United States, unless another region is agreed with the customer |
| Microsoft Corporation (Azure) | Cloud hosting and infrastructure for the Services | Customer Hold Records, which are stored in Zubu's hosting environment. Customer Source Data only while it passes through that environment during a collection the customer directs; it is not retained | United States, unless another region is agreed with the customer |
Each sub-processor is bound by a written agreement with data protection obligations no less protective than the DPA. Zubu remains responsible to its customers for each sub-processor's performance.
Changes to this list
Zubu will update this page and email the administrative contact each customer has designated in the Services at least thirty (30) days before a new sub-processor begins processing Customer Data. A customer may object on reasonable data protection grounds within fifteen (15) days after that notice, as Section 6 of the DPA provides.
Not sub-processors
The following are not Zubu's sub-processors, because the customer chooses and controls them:
the customer's own source systems, such as Microsoft 365, Google Workspace, Slack and Confluence;
the storage, review platform or other destination the customer chooses for collected content;
the customer's identity provider;
any third-party tool, including an AI tool or assistant, that the customer connects to the Services; and
an authorized Zubu partner that the customer engages.
Zubu does not send Customer Data to third-party AI model providers.
Contact
Questions about this list: privacy@zubu.ai. Zubu.AI, Inc.,
Attn: Privacy, 100 Pine Street, Suite 1250, San Francisco, CA 94111, United States.
.svg){kind=small}
