Browse Trust Center documents
← Trust Center

Legal

Privacy & data

AI & safety

Security

Trust Center Privacy & data

Subprocessors

The categories of service providers that process personal data for Zero Human AI, what each does, and where. Named list available under NDA during the pilot.

Last updated 16 October 2026

The short version

  • These are the kinds of companies that help us run Ori, and where they process data.
  • During the pilot we share the named list under NDA. It will be published here at general availability.
  • We give 30 days’ notice before adding or replacing one. Sign up below to hear first.

1. Current subprocessors#

CategoryWhat they do for usData involvedWhere
Cloud hosting and databaseRun the website, the Studio and our databaseAll service dataYour chosen region
GPU computeRender video with OriginWorkspace media and briefsYour chosen region
Email deliverySend sign-in codes, invites and noticesName, email, message contentUnited States
Bot protectionCheck that sign-ups and forms come from peopleIP address, browser signalsGlobal edge network
Product analyticsCount product events, without cookiesEvent names, hashed or account identifiersUnited States or EU
Error monitoringReport crashes, with personal data removedTechnical error detailsUnited States or EU
Team communicationNotify our team of sign-ups, invites and requestsName, email, business nameUnited States
Payments (when paid plans open)Billing and invoicesBilling contact, plan, payment statusGlobal

Some services you choose to connect aren’t our subprocessors but independent companies with their own terms: sign-in providers (Google, Apple, Microsoft) and ad platforms (such as Meta, TikTok, Snapchat and YouTube) only for the accounts you connect.

2. Changes and notice#

We check every subprocessor’s security and privacy before we use it, and bind it by a written agreement. We give 30 days’ notice before a new one starts processing customer data, so you can object under the Data Processing Addendum.

Get an email before the list changes:

3. The named list#

Choose “Named subprocessors” in the document request form on the Trust Center. It’s shared under our mutual NDA during the pilot.

Request documentsSecurity overview, DPA, penetration-test summary, CAIQ Lite and more. We reply within two business days.
Request →
LegalData Processing AddendumA summary of the Data Processing Addendum that governs personal data Zero Human AI processes on behalf of customers, and how to get a signed copy.Privacy & dataPrivacy PolicyWhat personal data Zero Human AI collects when you use Ori and our website, why, who we share it with, how long we keep it, and the rights you have in the GCC, the EU and UK, and the US.SecuritySecurityHow Zero Human AI protects Ori and your data: infrastructure, encryption, access control, application and sign-in security, monitoring, vulnerability management, incident response and business continuity.

Questions about this document? Write to info@zerohuman.co.