Sub-processors
Last updated: 1 September 2026
A sub-processor is a third party that processes personal data on PlugZero's behalf. We engage the following sub-processors to provide the PlugZero service. Every sub-processor is bound by a written agreement that imposes data-protection terms substantially no less protective than our Data Processing Addendum.
30-day change notice commitment
When we add a new sub-processor or replace an existing one, we give customers at least 30 days' written notice by email and in-app before the change takes effect. Customers may object on reasonable data-protection grounds and, if the objection cannot be resolved, terminate the affected services and obtain a pro-rata refund (Section 4.2 of the DPA).
Hosting and infrastructure
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud compute, storage, encryption (KMS), content delivery | EU (eu-west-1, eu-west-2) for EU/UK customers by default; US regions available on request | EU SCCs Module 2 + UK Addendum |
| Vercel Inc. | Frontend hosting, edge functions, build infrastructure | Global edge; build artefacts in US | EU SCCs Module 2 + UK Addendum; DPF for eligible processing |
Payments
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Stripe Payments Europe Ltd. / Stripe Inc. | Subscription billing, invoice generation, fraud detection | EEA or US depending on Customer entity | EU SCCs Module 2 + UK Addendum |
AI / LLM inference (opt-in)
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Google LLC — Gemini API | Default LLM for AI chat, sentiment aggregation, topic clustering, key drivers, SWOT | US (default); EU endpoint available on request | EU SCCs Module 2 + UK Addendum; training opt-out |
| Anthropic PBC (optional alternative) | LLM for AI chat and insights | US (default); EU via AWS Bedrock on request | EU SCCs Module 2 + UK Addendum; training opt-out |
| OpenAI, L.L.C. (optional alternative) | LLM for AI chat and insights | US (default) | EU SCCs Module 2 + UK Addendum; training opt-out |
Transactional email
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Postmark / ActiveCampaign LLC | Transactional email (account, billing, security alerts) | US | EU SCCs Module 2 + UK Addendum |
Observability and security
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Sentry.io (Functional Software, Inc.) | Error and crash reporting | US | EU SCCs Module 2 + UK Addendum |
| Cloudflare, Inc. | CDN, DDoS protection, edge security | Global edge | EU SCCs Module 2 + UK Addendum |
Marketing-site analytics
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Google LLC — Google Analytics 4 | Anonymous usage statistics for the marketing site only (measurement ID G-9SR1NCJGF2). Gated behind the cookie-consent banner — not loaded until you opt in to the Analytics category. Used IP-anonymisation (analytics_storage=denied by default for EEA/UK traffic where required). | US / EEA (depending on Google routing) | EU SCCs Module 2 + UK Addendum; UK–US Data Bridge where Google is certified |
Customer support and CRM (only when used)
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| HubSpot, Inc. | CRM for marketing leads and customer support tickets | US | EU SCCs Module 2 + UK Addendum; signed DPA |
Why we publish this list
UK GDPR and EU GDPR Article 28 require that customers (as controllers) are informed of any sub-processor that processes their personal data, and are given a meaningful opportunity to object. By publishing this list and committing to a 30-day change notice, we make it easy for our customers to fulfil their own transparency obligations and to exercise their right to object.
AI sub-processors and training
PlugZero does not train any AI model on customer data. Our contracts with AI sub-processors (Google, Anthropic, OpenAI) prohibit them from training on customer data and require a written opt-out confirmation. EU/UK customers may opt into EU in-region inference where commercially available.
Objecting to a change
If you are an existing customer and you object to a new or replaced sub-processor, email privacy@plugzero.app within the 30-day notice period, quoting the change-notice reference. Please describe your data-protection grounds. We will work with you in good faith to resolve the objection; if we cannot, you may terminate the affected services without liability and receive a pro-rata refund.