Subprocessors
Every third party that may process customer data, what they do, and where they do it. Thirty days notice before this list changes.
DRAFT · NOT LEGAL ADVICE
This document records how Zuger intends to operate and is published so you can read it before you sign up. It is a working draft pending review by counsel in each of our three jurisdictions, and it is not legal advice to you. The executed version you receive at signup is the one that governs. Last updated 13 September 2026.
Current list
| Subprocessor | Purpose | Location |
|---|---|---|
| Anthropic | Model provider: judgment nodes in agent runs, under zero-retention commercial terms. EU residency option: selectable per company; Anthropic serves the EU from its global endpoint today, and the Console says so rather than implying an EU endpoint that does not exist | US (SCCs) |
| OpenAI | Model provider: extraction, classification, matching and vision, under zero-retention commercial terms. EU residency option: selectable per company, served from OpenAI's EU endpoint. Off until its evaluation passes | EU (EU endpoint) / US (SCCs) |
| Revolut | Subscription payments: card and Revolut Pay inside Revolut's own frame. Zuger never sees a card number. VAT is determined by Zuger, not by Revolut | EU (Lithuania) / UK |
| Resend | Transactional and agent email | EU / US (SCCs) |
| GoCardless (Bank Account Data) | Read-only bank feeds, EU/EEA and UK: accounts, balances, transactions | EU / UK |
| Tink | Read-only bank feeds, EU/EEA: accounts, balances, transactions | EU |
| Lean Technologies | Read-only bank feeds, UAE and Saudi Arabia. Contract pending; not live | UAE (SCCs) |
| Tarabut | Read-only bank feeds, Bahrain and Saudi Arabia. Contract pending; not live | Bahrain (SCCs) |
| bLink (SIX) | Read-only bank feeds, Switzerland. Contract pending; not live | Switzerland (adequacy) |
| Xero · QuickBooks Online · Zoho Books | Only where you connect your books: read-only accounting data | EU / US / Global (SCCs where outside the EEA) |
| Stripe | Only where you connect it: read-only payouts and charges. Not a payment processor for Zuger | EU / US (SCCs) |
| Google Workspace · Microsoft 365 · Slack · Notion · HubSpot · Linear · GitHub | Only where you connect them: read-only access to mail, calendar, files, messages, pages, deals, issues. Gmail's compose scope prepares drafts a person sends | EU / US (SCCs) |
| Cloud infrastructure — EU | Platform hosting, Postgres, Redis, workers | EU |
| Object storage — EU | Documents, artefacts and audit-log archives | EU |
| Error monitoring | Diagnostics and crash reports, scrubbed of content | EU |
Zero retention
Model providers are engaged on terms that forbid training on our customers’ data and require zero retention beyond the request. Where a provider cannot offer that, we do not use it — regardless of how good the model is.
What they never see
No subprocessor receives your connected credentials. Those are decrypted only inside the worker that uses them, never through a model prompt and never into a transcript.
Notice of change
We publish additions here and email account administrators 30 days before a new subprocessor begins processing. If you object and we cannot resolve it, you may terminate the affected service without penalty.
Detail on request
Named entities, group companies, security certifications and transfer mechanisms are available under NDA for security reviews. Write to security@zuger.ai.
Questions about this?
Write to privacy@zuger.ai for anything on this page. A person answers, not a portal.