Subprocessors
This document is a draft and may change before launch.
Last updated: [effective date]
[company legal name] uses the service providers below to run Zrico. Each one may process personal information or customer content on our behalf. We have contracts with each that include data protection terms.
For how AI providers handle prompts and responses, see How AI providers handle your data.
| Name | Purpose | Data processed | Location | Link (privacy/DPA) |
|---|---|---|---|---|
| [server host] | Hosting for firm workspaces and the dashboard | All customer data: workspace content, files, chats, account and firm data | United States | Published with the provider's name |
| Cloudflare | DNS, content delivery, web application firewall, TLS proxy, marketing site hosting, Turnstile bot checks | Website and app traffic in transit, IP addresses, request metadata | Global edge network | Privacy, DPA |
| Cloudflare R2 | Storage for encrypted nightly backups | Encrypted backups of all customer data (Cloudflare cannot read the contents) | United States | Privacy, DPA |
| Anthropic | Claude AI models | Prompts, conversation context, file excerpts and responses | United States | Privacy, Commercial Terms and DPA |
| Amazon Web Services (Bedrock) | Backup route for Claude AI models | Prompts, conversation context, file excerpts and responses | United States | Privacy, Service Terms and DPA |
| OpenAI | GPT AI models and text embeddings for file search | Prompts, conversation context, file excerpts, uploaded file text (for embeddings) and responses | United States | Privacy, DPA |
| Resend | Transactional email (invites, password resets, billing and account notices, contact form delivery) | Names, email addresses, email content | United States | Privacy, DPA |
| Square | Subscription billing and payments | Billing contact details, subscription and invoice data. Card details are collected and held by Square, not by us. | United States | Privacy |
| Microsoft | Microsoft Entra ID sign-in, only for firms that turn it on (coming soon, not available at launch) | Firm's Microsoft tenant ID, user identity claims (name, email, user ID) | United States and Microsoft's global network | Privacy, DPA |
Not a subprocessor
- Status monitoring. Our status page at status.zrico.com runs on Uptime Kuma, which we host ourselves. It checks whether services are up. It does not receive customer content, and no third party is involved.
Changes to this list
Before we add or replace a subprocessor, we will:
- update this page, and
- email the owners of every firm,
at least 15 days before the new subprocessor starts processing customer data. A firm may object to a new subprocessor as described in our Data Processing Addendum.
Questions: support@zrico.com.
Questions about this document? Email support@zrico.com.