How many subprocessors does Zscaler use?

Zscaler lists 20 subprocessors on its published list, including Amazon Web Services (AWS), Microsoft Corporation (Azure), Google Cloud Platform, Snowflake, and Databricks and 15 more.

Where does Zscaler process customer data?

The subprocessors named by Zscaler are located in United States, Hosted globally, India, Australia, Japan, and Austria and 17 other locations, as stated on its list.

How quickly does Zscaler report a personal data breach to customers?

According to its DPA, Zscaler reports a personal data breach to customers without undue delay, with no set deadline: “Zscaler shall notify Customer without undue delay”

How much notice does Zscaler give before adding a subprocessor?

Zscaler's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Zscaler will provide Customer with at least thirty (30) days advance notice before a new Sub-processor processes any Personal Data”

How does Zscaler transfer personal data outside the EU?

Zscaler's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “EU Standard Contractual Clauses and UK Addendum.”

When was Zscaler's subprocessor list last checked?

ClauseTrail last checked Zscaler's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when Zscaler adds or removes a subprocessor?

ClauseTrail monitors Zscaler's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Zscaler Subprocessors List (September 2026): Changes and History

Zscaler names 20 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Zscaler subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services (AWS)	Hosting for certain features of Zscaler Private Access (ZPA), Zscaler Internet Access (ZIA), Zscaler Deception, ZIdentity, Zscaler UVM, Zscaler Breach Predictor, Data Security Posture Management (DSPM), Zscaler Microsegmentation, Zscaler Threat Hunting Service (ZTH), Adaptive Access Engine, Zscaler Network Observability, Zero Trust Gateway, Zero Trust Branch, Business Insights, AI Protect Platform, Zero Trust Browser, Identity Protection, SOC Workbench, Health360, ZAgent, MDR, Risk360, SaaS Security Posture Management (SSPM) and Agentic SecOps.	Hosted globally
2	Microsoft Corporation (Azure)	Hosting for certain features of Zscaler Private Access (ZPA), Zscaler Internet Access (ZIA), Zscaler Digital Experience (ZDX), Business Insights, Zscaler Network Observability, Health360, ZAgent, MDR, Risk360, and AI Scanning Platform	Hosted globally
3	Google Cloud Platform	Hosting for certain features of cloud infrastructure entitlement management (CIEM), IoT Discovery Report, Zscaler Breach Predictor, Zscaler Network Observability, Zscaler Copilot, ZAgent, Risk360, and Zero Trust Browser	United States, European Union
4	Snowflake	Hosting for certain features of Zscaler Posture Control (ZPC), Asset Exposure Management, Identity Protection, and Agentic SecOps	Hosted globally
5	Databricks	Hosting for certain features of Data Security Posture Management (DSPM)	United States
6	Alibaba Cloud	Hosting for certain features of Zscaler Products to support Customer Users in China	China
7	CentraComm Communications	Augmenting Zscaler Support Services for GovCloud Customers, including responding to support tickets	United States
8	Accenture Federal Services	Providing Zscaler Support Services for certain Gov Cloud Customers.	United States
9	Concentrix	Augmenting Zscaler Support Services, including responding to support tickets	Bulgaria, India
10	Momentum Labs, Inc.	Improving customer support services	United States
11	Movate (formerly CSS Corp. dba SlashSupport)	Augmenting Zscaler Support Services, including responding to support tickets	India
12	JTP CO	Augmenting Zscaler Support Services for Customers who require Japanese language capabilities, including responding to support tickets	Japan
13	Salesforce, Inc.	Customer support platform	United States
14	SendSafely, Inc .	Encrypted file exchange platform used for support services	United States
15	theLoopsai, Inc.	Improving customer support services	United States
16	Zscaler Affiliates	To provide the Products, including Support Services, order processing, etc.	United States, India, Brazil, Australia, Canada, Japan, Israel, Costa Rica, UK, Spain, Sweden, Austria, Germany, France, Switzerland, the Netherlands, Poland, Croatia, and Singapore
17	Have I Been Pwned	Email address breach detection and exposure monitoring for Zero Trust Browser	United States, Australia
18	Sendgrid (Twilio, Inc.)	Email communications provider for transactional notifications to system administrators for Zero Trust Browser and MDR	United States
19	Functional Software, Inc. d/b/a Sentry	Application monitoring for MDR	United States
20	Splunk, Inc.	Infrastructure logging and metrics for MDR	United States

Get an email when Zscaler changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Zscaler free

Key DPA terms at Zscaler

What Zscaler's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Zscaler shall notify Customer without undue delay”
DPA, www.zscaler.com ↗
Notice of a new subprocessor: 30 days ahead

“Zscaler will provide Customer with at least thirty (30) days advance notice before a new Sub-processor processes any Personal Data”
DPA, www.zscaler.com ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“EU Standard Contractual Clauses and UK Addendum.”

“Zscaler is certified to the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF and the commitments they entail.”
DPA, www.zscaler.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Zscaler will, at Customer's option, and subject to the terms of this DPA (a) delete or return all Personal Data to Customer after the end of the provision of the Products”
DPA, www.zscaler.com ↗
Audit rights: Once a year

“An Audit of its data processing facilities may be performed no more than once per year during Zscaler's normal business hours”
DPA, www.zscaler.com ↗

Documents we track for Zscaler

DPA: checked September 28, 2026 www.zscaler.com ↗
Subprocessor list: checked September 28, 2026 www.zscaler.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Zscaler subprocessors FAQ

How many subprocessors does Zscaler use?: Zscaler lists 20 subprocessors on its published list, including Amazon Web Services (AWS), Microsoft Corporation (Azure), Google Cloud Platform, Snowflake, and Databricks and 15 more.
Where does Zscaler process customer data?: The subprocessors named by Zscaler are located in United States, Hosted globally, India, Australia, Japan, and Austria and 17 other locations, as stated on its list.
How quickly does Zscaler report a personal data breach to customers?: According to its DPA, Zscaler reports a personal data breach to customers without undue delay, with no set deadline: “Zscaler shall notify Customer without undue delay”
How much notice does Zscaler give before adding a subprocessor?: Zscaler's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Zscaler will provide Customer with at least thirty (30) days advance notice before a new Sub-processor processes any Personal Data”
How does Zscaler transfer personal data outside the EU?: Zscaler's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “EU Standard Contractual Clauses and UK Addendum.”
When was Zscaler's subprocessor list last checked?: ClauseTrail last checked Zscaler's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Zscaler adds or removes a subprocessor?: ClauseTrail monitors Zscaler's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.