ZopDev – Subprocessor List
Effective Date: 30 September 2025
Entity: ZopDev Technology Private Limited (“ZopDev”, “we”, “us”, or “our”)
This Subprocessor List identifies the third-party entities authorized to process Customer Data in connection with ZopDev’s Services, as referenced in the Data Processing Addendum (DPA).
Each subprocessor is subject to written agreements imposing data-protection obligations materially consistent with those described in the DPA and ZopDev’s Security Practices.
1. Infrastructure Subprocessors
Name | Purpose | Location(s) | Data Processed | Safeguards / Certifications |
Google Cloud Platform (GCP) | Primary hosting infrastructure, storage, and networking for ZopDev platform and services | Global (with primary region: Mumbai, India; failover: Singapore) | Customer Data, Service Data | ISO 27001, SOC 2 Type II, GDPR, CCPA compliance |
2. Analytics and Telemetry Subprocessors
Name | Purpose | Location(s) | Data Processed | Safeguards / Certifications |
PostHog Inc. | Product analytics and event telemetry | EU/US | Usage data, event metadata, pseudonymized identifiers | GDPR-compliant processing under SCCs |
Zoho Corporation Pvt. Ltd. | Business analytics dashboards, customer success reporting, and operational metrics | India / US / EU | Aggregated usage data, account metrics | ISO 27001, SOC 2 Type II |
Google Analytics (Google LLC) | Website and marketing analytics | Global | Web usage data, anonymized IPs, cookies | GDPR-compliant under SCCs, ISO 27001 |
Microsoft Clarity (Microsoft Corporation) | Session replay and heatmap analytics for UI/UX optimization | Global | Clickstream, device metadata, anonymized session data | SOC 2 Type II, GDPR compliance |
3. Support & Operations Subprocessors
Name | Purpose | Location(s) | Data Processed | Safeguards / Certifications |
Zoho Desk / Zoho Mail (Zoho Corporation Pvt. Ltd.) | Customer support ticketing, communications | India / EU | Contact info, support content | ISO 27001, SOC 2 Type II |
4. General Notes
Data Residency: ZopDev primarily hosts data within India (GCP Mumbai region). Backup and failover may occur in Singapore or another GCP region to ensure continuity.
Updates: ZopDev may engage new subprocessors or modify existing ones. Customers will be notified via email or this page at least 30 days prior to the effective date of any change, as outlined in the DPA.
Data Transfers: Where subprocessors process data outside the origin country, ZopDev relies on Standard Contractual Clauses (SCCs) or equivalent mechanisms for lawful transfer.
Security & Compliance: All subprocessors are vetted through ZopDev’s vendor risk-assessment process, ensuring security, privacy, and compliance obligations consistent with ZopDev’s internal standards.
Contact for Subprocessor Inquiries
ZopDev Technology Private Limited
2078, 24th Main Rd, Vanganahalli, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102, India
legal@zopdev.com | support@zopdev.com
Prepared by:
Talvinder Singh — CEO & CMO, ZopDev Technologies Pvt. Ltd.
Date: 30 September 2025