Sub-processors
Last updated: October 2026
ZyroBooks engages the following sub-processors to provide the service. Business customers are notified of material changes per our DPA.
| Sub-processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Cloudflare, Inc. | DNS, CDN, WAF, DDoS protection | Global edge | SCCs |
| Vultr (cloud server hosting) | Application and database hosting | Bangalore, India | Provider DPA / SCCs |
| Cloudflare R2 | Encrypted off-server backup storage | Global | SCCs |
| Google (Gmail SMTP) | Transactional email | Global | SCCs |
| Google Gemini / Groq | Optional AI features, only when the customer enters their own API key | Global | Customer's own API agreement |
Changes
We will give at least 30 days’ notice of new sub-processors. Business customers can object under the DPA.
Contact
Data protection enquiries: hello@zyrobooks.uk