Subprocessors
Last updated: June 30, 2026
A subprocessor is a third party we engage to help deliver the ZenABM service that may process customer data on our behalf. ZenABM acts as a data processor on our customers' instructions, and we remain responsible for the subprocessors we use. Each subprocessor is bound by data-protection terms consistent with our Data Processing Addendum, including the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA) where data leaves the United Kingdom or the European Economic Area.
The table below lists the subprocessors ZenABM currently engages to provide its service.
| Subprocessor | Purpose | Entity location | Transfer safeguard |
|---|---|---|---|
| Neon, Inc. | Managed PostgreSQL database hosting (primary data store) | United States (us-east-1) | EU SCCs + UK IDTA |
| Amazon Web Services, Inc. | Backend infrastructure & storage | United States (us-east-1) | EU SCCs + UK IDTA |
| Vercel, Inc. | Application hosting, edge network, WAF, DDoS protection | United States | EU SCCs + UK IDTA |
| Paddle.com Market Ltd | Payment processing & billing (Merchant of Record) | United Kingdom | UK (domestic; no transfer) |
| Anthropic, PBC | AI assistant (“Zena”), invoked on demand; not used for model training | United States | EU SCCs + UK IDTA |
| Resend, Inc. | Transactional email delivery (e.g. account, security, and product notifications) | United States | EU SCCs + UK IDTA |
| Google LLC | Authentication (Login with Google / OIDC) | United States | EU SCCs + UK IDTA |
Planned subprocessors
The following subprocessor is upcoming and pre-authorized. We are disclosing it in advance so that, when the change takes effect, it requires no further notice. It is not yet processing customer data.
| Subprocessor | Purpose | Entity location | Transfer safeguard |
|---|---|---|---|
| Clerk, Inc. | Authentication provider (migration planned, 2026) | United States | EU SCCs + UK IDTA |
Changes to this list
We may add or replace subprocessors as our service evolves. Where we do, we will update this page and aim to give affected customers reasonable advance notice before the new subprocessor begins processing personal data, so that any objection rights set out in the applicable Data Processing Agreement can be exercised. To be notified of changes, contact mj@zenabm.com.
Contact
For privacy or security questions, contact us at mj@zenabm.com.
