Service Specific Sub-processors and Third Parties

Last Updated on : 6th January 2023

Zoho uses certain sub-processors, content delivery networks and third parties to assist it in providing the Zoho Services.

What is a Sub-processor

A sub-processor is a third party data processor engaged by Zoho, who has or potentially will have access to or process Service Data (which may contain Personal Data). Zoho engages different types of sub-processors to perform various functions as explained in the tables below.

Process followed to on-board a Sub-Processor

Zoho evaluates the security and privacy practices of sub-processors whom we wish to contract to ensure that they are in line with Zoho's information security and privacy standards. We then execute appropriate data protection agreements with them.

Filter by Applicable Services

Select services
Zoho BooksZoho CampaignsZoho CheckoutZoho CreatorZoho ExpenseZoho InventoryZoho InvoiceZoho PageSenseZoho PayrollZoho ShiftsZoho SalesIQZoho SubscriptionsZoho RecruitZoho SurveyZoho SignSite24x7Zakya
Selected: 0
Apply
Clear all
Sub-processor NameServiceLocation of ProcessingApplicable Zoho ServicesApplicable Data CenterApplicable ForType of data shared/processed
Amazon CDNTo provide a content delivery network to improve the speed of data transmissionWorldwide1. Zoho PageSense
US, EU, IN, AUAll the customers around the globeStatic webpage content and custom scripts
2. Site24x7
US, EU, IN, AUAll the customers around the globeStatic webpage content and custom scripts
3. Zoho Books,
4. Zoho Invoice,
5. Zoho Inventory,
6. Zoho Expense,
7. Zoho Payroll,
8. Zoho Subscriptions,
9. Zoho Checkout 		US, INAll the customers around the globe who have signed up in the US or IN DC.Static webpage content and IP address
Amazon SNSSending text messages to individuals, or multiple persons simultaneously In the US-East for the US & IN DCs

In the AU for the AU DC 		Zoho ShiftsUS, IN, AUAll the customers around the globePhone number
DaxtraTo parse CVs, resume or other candidate information In Singapore for the US, IN & AU DCs,

In Ireland for the EU DC 		Zoho RecruitUS, IN, AU, EUAll the customers around the globeResume
Easy PostA shipping service used to deliver goods/itemsIn the US for all the DCs 1. Zoho Books
2. Zoho Inventory
3. Zakya (Restricted Users) 		US, EU, IN, AUAll the customers around the globe 1. Customer's postal address (Shipment dispatch address),
2. End user's postal address (Shipment destination address),
3. Shipment specific details (Eg: Dimension, weight of the package, etc)
Google TranslateTo carry out translation between different languages In the US for all the DCs1. Zoho CreatorUS, EU, IN, AUAll the customers around the globe who have signed up for Premium and Ultimate Edition 1. Application meta data (Eg: Application name, Form name, Fields name, etc)
2. Static content of the creator website other than the User/Application specific data
2. Zoho SurveyUS, EU, IN, AUAll the customers around the globe who have signed up for Pro and Enterprise EditionSurvey meta data (Eg: Survey name, Question message, Option message, etc) created by the customer
3. Zoho SalesIQUS, IN, AUAll the customers around the globe who have signed up for Enterprise EditionChat text
LitmusTo preview the Zoho Campaigns output in various browsersIn the US-East for all the DCsZoho CampaignsUS, IN, AUAll the customers around the globe who have signed up in the US or IN or AU DCEmail Content
Luna SoftE-Invoice provider for MexicoUS1. Zoho Books,
2. Zoho Invoice,
3. Zoho Inventory,
4. Zoho Subscriptions		US All the customers around the globe who have signed up for Mexico Edition in US DCCustomer's RFC Number (Tax Registration Number)
Customer's Digital Seal Certificate (CSD or Certificado de Sello Digital) (certificate + key)
Customer's Password for the key.
Recipient's RFC Number (Tax Registration Number).
ZohoBooks SmarterWeb Credentials.
Customer's Sales transactions (Invoices, Credit notes).
PerfiosTo fetch bank transactions statementsIn India for all the DCs 1. Zoho Books
2. Zoho Expense 		US, INAll the customers who have signed up for Indian Edition & GCC Edition in US or IN DCBank PDF Statements
Postal MethodsTo deliver hard copies of commercial documents.In the US for all the DCs 1. Zoho Invoice
2. Zoho Books
3. Zoho Inventory
US, IN, AUAll the customers around the globe who have signed up for US Edition in US or IN or AU DC 1. Invoice PDF
2. End users' address
3. Address of Zoho customer
VeryfiTo extract data from the documents uploaded for auto scan. In the US(East and West) for the US DC

In Canada, Europe (Frankfurt) for the EU DC

In Asia / Pacific (Australia) for the IN & AU DCs 		1. Zoho Expense
2. Zoho Books
3. Zoho Invoice
4. Zoho Inventory		US, EU, IN, AUAll the customers around the globe 1.Receipts uploaded by the customers
2. Country and Currency of the customer.
YodleeTo fetch bank transactions statementsIn the US for all the DCs 1. Zoho Books
2. Zoho Expense 		US, IN, AUAll the customers around the globe who have signed up in the US or IN or AU DCBank account information and its transactions.

Third Party Service Providers used by Zoho to provide you the Services:

What is a Third Party Service Provider?

In this context, "Third Party Service Provider" means those recipients of personal information that do not fall strictly under the category of sub-processors. It may be because either Zoho is acting as a controller for the information shared with the Third Party Service Provider (such as information processed for spam filtering and fraud prevention) or the Third Party Service Provider acts as an independent controller (for example, because of a legal obligation). The role of each Third Party Service Provider is specified below.

We will give you a choice to disable the use of a particular Third Party Service Provider except when the Third Party Service Provider is used for critical requirements such as fraud prevention. Where we do not give you a choice to disable the use of a particular Third Party Service Provider, we will take measures to ensure that your information is secure and is processed in compliance with applicable data protection laws.

Filter by Applicable Services

Select services
Zoho AccountsZoho AssistZoho BiginZoho BooksZoho CampaignsZoho CheckoutZoho Daybook AppZoho ExpenseZoho InventoryZoho InvoiceZoho LensZoho MeetingZoho NotebookZoho PayrollZoho RecruitZoho SubscriptionsZoho SignSite24x7ManageEngine MDMCloudManageEngine AlarmsOneManageEngine ADSelfServicePlusZakya
Selected: 0
Apply
Clear all
Name of the ThirdParty Service ProviderServiceLocation of ProcessingRole of the ThirdParty Service ProviderApplicable Zoho ServicesApplicable Data CenterApplicabilityData Processed
AMD To send SMS for:
a. Two Factor Authentication(TFA)
b. Sign-up using SMS
c. Sign-in using SMS
d. Account Recovery using SMS
e. Forgot password recovery method
f. Addition of a number to your account
g. Recipient authentication when signing/approving documents
h. Initiating secure signature collection requests via mobile 		In Switzerland and Germany for all the DCsTo provide the service and for additional purposes according to their privacy policy. 1. Zoho Accounts,
2. Zoho Sign,
3. Zoho Recruit,
4. Zoho Notebook
US, EU, IN, AUAll the customers around the globe 1. Phone number
2. SMS content
BulkSMSSending text messages to individuals, or multiple persons simultaneouslyIn Ireland and South Africa for all the DCsTo provide the service and for additional purposes according to their privacy policy.1. Site24x7
2. Zoho Assist,
3. Zoho Lens		US, EU, IN, AUAll the customers around the globe 1. Phone number
2. SMS content
4. ManageEngine MDM Cloud
US, EU, IN, AUAll the customers around the globe 1. Phone number
2. SMS content
ClickatellSending text messages to individuals, or multiple persons simultaneouslyIn Ireland for all the DCsTo provide the service and for additional purposes according to their privacy policy.1. Site24x7,
2. Zoho Assist,
3. Zoho Lens		US, EU, IN, AUAll the customers around the globe 1. Phone number
2. SMS content
4. ManageEngine AlarmsOne
USAll the customers around the globe who have signed up in the US DC 1. Phone number
2. SMS content
5. ManageEngine MDM Cloud
US, EU, IN, AUAll the customers around the globe 1. Phone number
2. SMS content
6. ManageEngine ADSelfServicePlus
US, EU, IN, AUAll the customers around the globe 1. Phone number
2. SMS content
KaleyraSending SMS notifications to our customers and to their clients.In India for all the DCsTo provide the service and for additional purposes according to their privacy policy. 1. Zoho Books
2. Zoho Invoice
3. Zoho Inventory
4. Zoho Expense
5. Zoho Books - Payroll
6. Zoho Subscriptions
7. Zoho Checkout
8. Zoho Daybook App
9. Zakya (Restricted Users) 		US, EU, IN, AU All the customers around the globe who have signed up for India Edition and all the users who have chosen the org country as India(in their Global Edition) delivering SMSs only to Indian Mobile numbers 1. Email IDs and phone number of primary contact from Zoho
2. Business transaction details (Eg: invoice number, amount, date, etc.,) of our customers
3. Zoho's DLT registration details
10. Site24x7
11. Zoho Assist,
12. Zoho Lens		US, EU, IN, AUAll the customers around the globe with Indian Mobile numbers configured 1. Phone number
2. SMS content
13. ManageEngine MDM Cloud
US, EU, IN, AUAll the customers around the globe with Indian Mobile numbers configured 1. Phone number
2. SMS content
Sinch (formerly CLX) To send SMS for:
a. Two Factor Authentication(TFA)
b. Sign-up using SMS
c. Sign-in using SMS
d. Account Recovery using SMS
e. Forgot password recovery method
f. Addition of a number to your account
g. Recipient authentication when signing/approving documents
h. Initiating secure signature collection requests via mobile		 In North California, Ashburn for the US, IN & AU DCs

In Ireland, Sweden for the EU DC 		To provide the service and for additional purposes according to their privacy policy. 1. Zoho Accounts,
2. Zoho Sign,
3. Zoho Recruit
4. Zoho Notebook
US, EU, IN, AU All the customers around the globe.
European phone numbers are processed in Ireland and Sweden. 		1. Phone number
2. SMS content
Tata communicationsTo provide in-bound dialing servicesIn the US for all DCsTo provide the service and for additional purposes according to their privacy policy.Zoho MeetingUS, IN, AUAll the customers around the globeCDR (Call Details Record)
TeleSign To send SMS for:
a. Two Factor Authentication(TFA)
b. Sign-up using SMS
c. Sign-in using SMS
d. Account Recovery using SMS
e. Forgot password recovery method
f. Addition of a number to your Account
g. Recipient authentication when signing/approving documents
h. Initiating secure signature collection requests via mobile		In the US, UK, and EU for all the DCsTo provide the service and for additional purposes according to their privacy policy. 1. Zoho Accounts,
2. Zoho Sign,
3. Zoho Workerly,
4. Zoho Notebook,
5. Zoho Recruit 		US, EU, IN, AUAll the customers around the globe with their accounts hosted in the applicable data centers for delivering messages to US phone numbers 1. Phone number
2. SMS content
TelnyxSending promotional SMSs to the end-users/clients(having US or Canada phone numbers) of our customers.In the US for all the DCsTo provide the service and for additional purposes according to their privacy policy. Zoho CampaignsUS, EU, IN, AUAll the users around the world with their accounts hosted in the applicable data centers for delivering messages to US , Canada phone numbers. 1. Phone Number
2. SMS Content
TwilioSending text messages and voice call alerts to individuals, or multiple persons simultaneouslyIn the US-East-1 for all the DCsTo provide the service and for additional purposes according to their privacy policy.1. Zoho Bigin
US, EU, IN, AUAll the customers around the globeEnd users' phone number and the documents of customer (to purchase phone numbers)
2. Site24x7,
3. Zoho Assist,
4. Zoho Lens,		US, EU, IN, AUAll the customers around the globePhone number and the content (to be delivered to the customer) for SMS and Voice calls
5. ManageEngine AlarmsOneUSAll the customers around the globe signed up in the US DC SMS - Customer's IT alarm data, Display name of the entity and severity of the alert.

Call - Phone number is used to send call notification
ValiditySpam filtering, fraud detection, to improve deliverability of Zoho CampaignsIn the US for all the DCsTo provide the service and for additional purposes according to their privacy policy.Zoho CampaignsUS, IN, AUAll the customers of Zoho Campaigns who have signed up in the US or IN or AU DC across the globe.Email address of the sender
Bandwidth(Voxbone)To provide in-bound dialing servicesIn Belgium for all the DCsTo provide the service and for additional purposes according to their privacy policy.Zoho MeetingUS, EU, IN, AUAll the customers around the globeCDR (Call Details Record)
ZeroBounceTo validate user's contacts and remove inactive email addresses from the list to have better email delivery performance.In the EU for all the DCsTo provide the service and for additional purposes according to their privacy policy.Zoho CampaignsUS, IN, AUAll the customers around the globe signed up in the US or IN or AU DCCustomer's recipient email addresses.
Note:
  • If you enable the TFA settings(SMS method) for your Zoho Account, irrespective of the Zoho services that you use, the sub-processor associated with Zoho Account(for sending the SMS) will be utilized. Additionally, general services such as account recovery using SMS, sign up/sign in using SMS, adding a new number to your Zoho Account also uses the sub-processors associated with Zoho Accounts irrespective of the other Zoho applications you may use.
  • If you use our suite of applications such as Zoho One, "Plus" suites, then the sub processors associated with each of the respective products in those bundles would apply as mentioned in the above tabular column.
  • If you are the admin of any Zoho service for your organization, you can choose to subscribe for notifications on modifications (addition and change) of sub-processors in this page by clicking here.
  • Some of the sub-processors will be enabled by default, and the admin will be given the option to turn it off and few other sub-processors will be disabled by default and the admin of the org can enable it, as per their organisation's requirement.