Subprocessors and Data Processing Agreement (DPA)

The tabular list of all subprocessors used in the privacy policy — and how to obtain a DPA.

Last verified: 2026-07-20

In the public privacy policy, under item 13 ("Recipients and subprocessors"), you find a tabular, editorially maintained list of all subprocessors used, with country, purpose, processed data categories, condition of use, and transfer basis. This page is a single page, identical for all tenants.

Step by step

  1. Open the privacy policyGo to the public "Privacy" page and jump to item 13.
  2. Read the tableThe table currently lists three subprocessors: the hosting provider Hetzner Online GmbH (Finland/EU, server/infrastructure hosting, always active, DPA under Art. 28 GDPR within the EU), an external AI provider (USA, external AI processing for chatbot responses, only active in external AI mode — not for on-premises operation with a local model, Standard Contractual Clauses as the third-country transfer mechanism), and the SMS provider Twilio Inc. (USA, SMS dispatch, only active with a booked SMS channel, also Standard Contractual Clauses). You can find the specific name of the AI provider directly in the privacy policy.
  3. Check the condition of useFor each entry it is noted under which condition the respective provider is used at all — e.g. the SMS provider only concerns tenants with an activated SMS channel, the AI provider only applies with external rather than local AI operation.
  4. Request a DPAZentor provides a Data Processing Agreement upon request — an automatic self-service download does not currently exist.

Expected result

You know the complete, current list of subprocessors used and how to obtain a DPA.

Common error cases

I see a provider in the list (e.g. the SMS provider or the AI provider) that I do not use for my tenant at all.

Cause: The list is a single global page for all tenants and contains all subprocessors possible platform-wide — the "condition of use" column shows when an entry becomes specifically relevant for you (e.g. only with an activated SMS channel or external AI mode).

Resolution: Check the condition of use per row; a listed provider only concerns you if the stated condition applies to your tenant.

I want to download a DPA directly in the dashboard.

Cause: A self-service download for the DPA does not currently exist — it is provided upon request.

Resolution: Contact Zentor to obtain a DPA.

I want to edit or add to this list myself as a tenant admin.

Cause: Maintenance is done exclusively by Zentor via a Master Admin editor — there is no tenant admin editing option.

Resolution: Contact Zentor if you believe an addition or correction is needed.

Related articles

← Back to category