Subprocessors
Every third party that may process customer data, what they do, and where they do it. Thirty days notice before this list changes.
DRAFT · NOT LEGAL ADVICE
This document records how Zuger intends to operate and is published so you can read it before you sign up. It is a working draft pending review by counsel in each of our three jurisdictions, and it is not legal advice to you. The executed version you receive at signup is the one that governs. Last updated 13 September 2026.
Current list
| Subprocessor | Purpose | Location |
|---|---|---|
| Anthropic | Model provider: judgment nodes in agent runs, under zero-retention commercial terms. EU residency option: selectable per company; Anthropic serves the EU from its global endpoint today, and the Console says so rather than implying an EU endpoint that does not exist | US (SCCs) |
| OpenAI | Model provider: extraction, classification, matching and vision, under zero-retention commercial terms. EU residency option: selectable per company, served from OpenAI's EU endpoint. Off until its evaluation passes | EU (EU endpoint) / US (SCCs) |
| Stripe | Zuger's payment provider. Takes payment for plans and for priced Zuger Store hires: card details go into Stripe's own secure form, embedded in the Console, and Zuger never sees a card number. Pays Zuger Store sellers through Stripe Connect: a seller gives their identity and bank details to Stripe on Stripe's own pages, and Zuger holds only the account's id. VAT is determined by Zuger, not by Stripe | EU (Ireland) / US (SCCs) |
| Resend | Sends the emails Zuger sends you, sign-in codes among them | US (SCCs) |
| GoCardless (Bank Account Data) | Read-only bank feeds, EU/EEA and UK: accounts, balances, transactions | EU / UK |
| Tink | Read-only bank feeds, EU/EEA: accounts, balances, transactions | EU |
| Lean Technologies | Read-only bank feeds, UAE and Saudi Arabia. Contract pending; not live | UAE (SCCs) |
| Tarabut | Read-only bank feeds, Bahrain and Saudi Arabia. Contract pending; not live | Bahrain (SCCs) |
| bLink (SIX) | Read-only bank feeds, Switzerland. Contract pending; not live | Switzerland (adequacy) |
| Xero · QuickBooks Online · Zoho Books | Only where you connect your books: read-only accounting data | EU / US / Global (SCCs where outside the EEA) |
| Stripe, as a tool you connect | Only where you connect your own Stripe account for your agents to read: read-only payouts and charges. Separate from Zuger's own payments above | EU / US (SCCs) |
| Google Workspace · Microsoft 365 · Slack · Notion · HubSpot · Linear · GitHub | Only where you connect them: read-only access to mail, calendar, files, messages, pages, deals, issues. Gmail's compose scope prepares drafts a person sends | EU / US (SCCs) |
| Railway | Runs the application and hosts the database, the queue and the workers | EU |
| Netlify | Serves this website, and relays sign-in and Console requests from beta.zuger.ai to the application | US (SCCs) |
| Sentry | Error monitoring: stack traces and messages, scrubbed of secrets and personal data before they leave. No request bodies, cookies or user records | EU |
| Browser push services (Google, Apple, Mozilla) | Only where you turn notifications on: deliver a notice to your device when something needs your decision | US / EU, depending on the browser (SCCs) |
| Telegram | Only where you link the bot: delivers approval requests and Bernina notices to your chat | EU (Netherlands) / UAE (SCCs) |
Zero retention
Model providers are engaged on terms that forbid training on our customers’ data and require zero retention beyond the request. Where a provider cannot offer that, we do not use it — regardless of how good the model is.
What they never see
No subprocessor receives your connected credentials. Those are decrypted only inside the worker that uses them, never through a model prompt and never into a transcript.
Notice of change
We publish additions here and email account administrators 30 days before a new subprocessor begins processing. If you object and we cannot resolve it, you may terminate the affected service without penalty.
Detail on request
Named entities, group companies, security certifications and transfer mechanisms are available under NDA for security reviews. Write to security@zuger.ai.
Questions about this?
Write to privacy@zuger.ai for anything on this page. A person answers, not a portal.