In plain language
A quick orientation. The numbered sections below are the binding text.
- Core infrastructure (AWS, transactional email) processes data for every customer; Site analytics never touch Customer Content.
- Model, speech and telephony providers are engaged only when you pick that model or deploy that channel. If you never build a voice agent, no telephony or speech provider ever sees your data.
- Every sub-processor is under a written contract with confidentiality, security and data-transfer terms, and none may train models on your data.
- Subscribe to change notices by emailing privacy@zoft.ai with the subject "Sub-processor updates". We give 30 days' notice before adding one.
1. About this list
Under our Data Processing Addendum, Zoft.AI Private Limited may engage third parties to process Customer Content on our customers' behalf. This page is the authoritative list. Each entry states the purpose, the categories of data involved, the primary processing location, and the customer action that causes the sub-processor to be engaged.
Providers you connect directly with your own account or key — your CRM, calendar, help desk, Slack, Gmail or SMTP, Stripe, an existing Twilio account, a model provider key, a website your browser agent operates — are Connected Services under the Terms of Service, not sub-processors, because you control that relationship. They do not appear here.
2. Core infrastructure
| Sub-processor | Purpose | Data | Location | Engaged when |
|---|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting, object storage (S3), message queues (SQS), managed database and cache | All Platform data at rest and in transit | United States (us-east-1) | Always |
| PostHog, Inc. | Product analytics for the Site, in cookieless mode | Anonymous usage events. No Customer Content, no persistent identifier | European Union (Frankfurt) | Always (Site only) |
| Resend, Inc. | Transactional email (sign-in, invitations, alerts, receipts) | Email address, name, message content | United States | Always |
3. AI model providers
Engaged per Agent or workflow according to the model you choose. We call these providers through their business APIs, which exclude your data from training; where a provider offers a zero-data-retention option we enable it.
| Sub-processor | Purpose | Data | Location | Engaged when |
|---|---|---|---|---|
| OpenAI, LLC | Large-language-model inference and embeddings for Copilot, agents and workflows | Prompts, Customer Content included in prompts, completions | United States | Copilot use, or an OpenAI model selected in an Agent or workflow. API terms: no training |
| Anthropic, PBC | Large-language-model inference | Prompts, Customer Content included in prompts, completions | United States | An Anthropic model selected and served through Zoft-managed keys. Commercial terms: no training. If you connect your own key it is a Connected Service instead |
| Google LLC (Gemini API / Vertex AI) | Large-language-model and multimodal inference | Prompts, Customer Content included in prompts, completions | United States | A Gemini model selected and served through Zoft-managed keys. Paid API terms: no training. If you connect your own key it is a Connected Service instead |
4. Voice, telephony and messaging
Engaged only when you deploy a voice agent or provision a number. Audio is processed in real time and retained by these providers only as their contracts with us allow; recordings you keep are stored in our AWS environment or, for calls on Twilio numbers, in the Twilio account that carried the call.
| Sub-processor | Purpose | Data | Location | Engaged when |
|---|---|---|---|---|
| Twilio Inc. | Telephony (PSTN/SIP), phone-number provisioning, call recording storage | Phone numbers, call audio, call metadata, recordings | United States | Voice agent deployed on a Zoft-provisioned number. If you connect your own Twilio account it is a Connected Service instead |
| Ultravox (Fixie.ai, Inc.) | Real-time voice orchestration: speech recognition, turn-taking and speech-to-speech model inference for live calls | Live call audio, transcripts, agent instructions, tool-call payloads, cloud recordings | United States | Any voice agent call |
| ElevenLabs, Inc. | Text-to-speech | Text to be spoken, generated audio | United States | ElevenLabs voice selected for an agent |
| Cartesia AI, Inc. | Text-to-speech | Text to be spoken, generated audio | United States | Cartesia voice selected for an agent |
| Fish Audio, Inc. | Text-to-speech | Text to be spoken, generated audio | United States | Fish Audio voice selected for an agent |
| Sarvam AI (Sarvam AI Private Limited) | Text-to-speech for Indian languages | Text to be spoken, generated audio | India | Sarvam voice selected for an agent |
5. Browser execution and payments
| Sub-processor | Purpose | Data | Location | Engaged when |
|---|---|---|---|---|
| Browserbase, Inc. | Managed headless browsers for browser agents | URLs, page content, form inputs, screenshots and session recordings for the task; credentials you supply for the target site | United States | Browser agent run |
| Razorpay Software Private Limited | Payment processing, subscriptions and invoicing | Name, email, billing address, GSTIN, payment details (held by Razorpay only) | India | Paid plan |
6. Changes and objections
- We will update this page and notify subscribed customers at least 30 days before a new sub-processor begins processing Customer Content. Emergency replacements needed to keep the Service secure or available may be made sooner, with notice as soon as practicable.
- Customers who have signed the DPA may object on reasonable, documented data-protection grounds within the notice period, as described in DPA §5. If we cannot address the objection, the customer may terminate the affected Service and receive a pro-rated refund of prepaid fees.
- Removals take effect immediately and are reflected here with the version date.
| Version | Date | Change |
|---|---|---|
| 1.0 | 2026-09-08 | Initial publication. |