Snapshot 2097
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
List of Data Center Location(s) and Subprocessors
Zuora, Inc. (“Zuora”) engages various subprocessors to provide its services. A subprocessor is a third-party data processor engaged by
Zuora, including Zuora affiliates, who have or potentially will have the ability to process personal data based on your Zuora services.
Zuora will update this exhibit from time to time using Normal Communication Channels and as otherwise set forth in the MSA or DPA.
A. Entity engaged in the storage/hosting of Customer’s Tenant.
Entity Name Data Registered Address/ Contact Description of Data Processing Services
Center information Transfer Safeguards in case of Restricted Transfers
Location(s)
Amazon Web Zuora Amazon.com, Inc. AWS provides secure cloud infrastructure for the storage and
Services (AWS) Germany 2021 Seventh Ave security of customer tenant (which includes personal data
Japan Seattle, Washington 98121 collected by customers while using Zuora and Zephr services).
United United States Data is transferred continuously.
States
(depending privacy@amazon.com
on services AWS Bedrock powers the Zuora AI Features, which may
provided) process personal data defined by the customer within AWS
when enabled.
Zephr
Australia Standard Contractual Clauses
Brazil
Canada
Germany
Ireland
Italy
Japan
New
Zealand
Singapore
United
Kingdom
United
States
(depending
on services
provided)
B. Third Party Subprocessors engaged in the Processing of Customer Personal Data for non-storage/hosting purposes.
Subprocessor Processing Registered Address/ Contact Description of Data Processing Services
Location information Transfer Safeguards in case of Restricted Transfers
Atlassian Pty Ltd Zuora Atlassian Pty Ltd Zuora and Zephr use the Jira customer support/ticketing
United c/o Atlassian, Inc. services platform when providing support to customers. Jira
States 350 Bush Street, Floor 13 may be used to process certain customer-defined personal data
San Francisco, CA 94104 in connection with such requests.
Zephr
Australia privacy@atlassian.com
Germany Standard Contractual Clauses
Ireland
Singapore
United
States
(depending
on origin of
access)
Boomi, LP United Boomi, LP Boomi is an integration solution for Zuora's customers within
States 1400 Liberty Ridge Drive, the Zuora Billing Netsuite Connector, which provides
Chesterbrook, PA 19087 seamless data exchange between Zuora and Netsuite. Boomi
United States may process essential billing and financial information, such
as customer names, addresses, payment details, and
privacy@boomi.com transaction history, as defined by the customer. Data is
transferred on a schedule defined by the customer.
Standard Contractual Clauses
1
Last updated: June 10, 2026
Subprocessor Processing Registered Address/ Contact Description of Data Processing Services
Location information Transfer Safeguards in case of Restricted Transfers
Cloudflare, Inc. Zephr Cloudflare, Inc. Zephyr uses the Cloudflare Content Delivery Network
Global 101 Townsend St, (“CDN”) to optimize content delivery. CDNs are commonly
(depending San Francisco, CA 94107 used systems of distributed services that expedite the
on origin of USA transmission of content. The CDN processes data at the
access) point-of-presence closest to the location from which the end
privacyquestions@cloudflare. user is accessing the customer’s service, regardless of the
com customer’s location. Data is transferred in connection with
end user access and use.
Standard Contractual Clauses
Google Inc. The Google Netherlands Holdings Zuora uses Google Cloud Platform (GCP) to offer the Secure
Netherlands BV Data Sharing for Snowflake feature to customers whose
United Claude Debussylaan 34 Snowflake account is hosted on GCP in the same
States 1082 MD, Amsterdam customer-defined location. Data is transferred continuously.
United Netherlands
Kingdom
Google Inc. Standard Contractual Clauses
1600 Ampitheater Pkwy
Mountain View, CA 94043
United States
GOOGLE UK LIMITED
Belgrave House, 76
Buckingham Palace Road,
London, SW1W 9TQ
United Kingdom
https://support.google.com/cl
oud/contact/dpo
Growfin United Sinecycle Technologies Inc. Zuora uses Growfin to offer the Collections feature that
States, dba Growfin processes invoice and customer contact details, invoice
India, or Old No.06,New No.36, documents, payment and credit card details, as applicable.
Germany Suresh Nagar Main Road, Data is transferred at periodic intervals.
Valasaravakkam, Chennai,
Tamil Nadu, 600087
Standard Contractual Clauses
care@growfin.ai
LexisNexis Iceland, LexisNexis Risk Solutions, LexisNexis ThreatMetrix provides the digital identity and risk
India, Inc. intelligence that supports Zuora Fraud Protection, an add-on to
Netherlands Global Reach, Dunleavy Zuora Payments. ThreatMetrix evaluates event-level metadata
United Drive, Cardiff CF11 0SN, and behavioral signals associated with payment and account
Kingdom, United Kingdom activity to help assess fraud risk in real time. Data is shared on
United a per-event basis when fraud screening is triggered.
States EU by LexisNexis Risk
Solutions (Europe) Limited,
Riverside One, Sir John Standard Contractual Clauses
Rogerson's Quay, Dublin 2,
D02 X576, Ireland.
Attn: Data Protection Officer
https://risk.lexisnexis.com/cor
porate/processing-notices/thre
atmetrix#contact
Microsoft United Microsoft Corporation Zuora uses Microsoft's Power BI tools as part of Zuora
Corporation States or One Microsoft Way Revenue Analytics to enable customers to create interactive
Germany Redmond, WA 98052 visualizations and dashboards from their aggregated tenant
United States data. Customers that use Zuora’s Secure Data Sharing feature
and whose Snowflake Account is on Azure will also use
Microsoft. Data is transferred continuously.
Konrad-Zuse-Str.1
85716 Unterschleißheim
Germany Standard Contractual Clauses
dpoffice@microsoft.com
Qualtrics, LLC Canada Qualtrics, LLC If a Customer chooses to provide feedback to Zuora using the
333 W. River Park Drive feedback drawer within the application, Qualtrics sends
Provo, UT 84604 Zuora’s product team a record of the feedback, along with the
United States user’s Zuora user ID, the email address on their Zuora user
2
Last updated: June 10, 2026
Subprocessor Processing Registered Address/ Contact Description of Data Processing Services
Location information Transfer Safeguards in case of Restricted Transfers
profile, and the application page where the feedback was
privacy@qualtrics.com submitted. Data is transferred only in connection with
customer feedback submission.
Standard Contractual Clauses
Redocly Inc. United Redocly Inc. Redocly hosts Zuora's Developer Center, providing an
States 63 Pascal Ln. optional "Try It" console that enables customers to test APIs
Austin, TX 78746 against their sandbox environments. Customers may use APIs
United States to process personal information, including credit card or
payment information. Any processing of personal data in this
team@redocly.com context is discretionary and as designed by the Customer.
Standard Contractual Clauses
Snowflake, Inc. United Snowflake, Inc. Snowflake provides Zuora Revenue with a cloud-based data
States or 106 East Babcock St, Ste 3A analytics service that enables Customers to aggregate their
Germany Bozeman, Montana 59715 tenant data so that the data can be made available for
United States analytical analysis and reports using Microsoft Power BI
tools. Snowflake is only used for customers who have enabled
Leipziger Platz 18, 10117 Zuora Secure Data Sharing for Snowflake, Zuora Revenue
Berlin, Germany Analytics or Zuora Warehouse. Data is transferred
continuously.
privacy@snowflake.com
Standard Contractual Clauses
Stripe, LLC United Stripe, LLC Zuora uses Stripe Financial Connections to support the Bank
States or 354 Oyster Point Boulevard Account Verification feature. Stripe Financial Connections
Ireland South San Francisco, enables retrieval of bank account and balance information to
California, 94080, USA perform account verification and balance refresh. Data is
processed and transferred as part of the verification workflow
Stripe Technology Company initiated by the end user.
Limited
One Wilton Park, Wilton
Place, Dublin 2, D02 FX04, Standard Contractual Clauses
Ireland
privacy@stripe.com
Twilio Inc United Twilio Inc Zuora uses Twilio for two-factor authentication via SMS,
States or 101 Spear Street, Fifth Floor, when this feature is enabled by the Customer. Data is
Ireland San Francisco, CA 94105 transferred when feature is in use.
United States
privacy@twilio.com Standard Contractual Clauses
USERPILOT, United USERPILOT, INC. As a Customer uses Zuora Billing, Userpilot records the
INC. States 1887 Whitney Mesa Dr, Customer’s Zuora user ID and information from their Zuora
Henderson, NV 89014 user profile, including business email address and name.
United States Userpilot also records information about the user’s location in
the application and details about the user’s browser. Data is
security@userpilot.co transferred continuously as the user interacts with the
application. Data is processed for the purpose of offering
in-context assistance and announcements to users based on
their individual usage of the application.
Standard Contractual Clauses
Yuno Tecnologías, United Yuno, Tecnologias Yuno powers the payment processing functions for Zuora
S.A.P.I. de C.V. States; S.A.P.I. de C.V. customers. Yuno processes payment method collection
India Cráter 38, Jardines del information, as well as submission and account information to
Pedregal, Alvaro Obregón, manage Payments processing and to route payments
Mexico City, CP 01900 transactions to the Customer’s chosen gateways and fraud
Mexico providers. Data is transferred continuously.
dpo@y.uno.
Standard Contractual Clauses
3
Last updated: June 10, 2026
Subprocessor Processing Registered Address/ Contact Description of Data Processing Services
Location information Transfer Safeguards in case of Restricted Transfers
ZenDesk, Inc. United ZenDesk, Inc. Zendesk operates a cloud-based customer support/ticketing
States 989 Market Street services platform that Zuora and Zephr use as an online
San Francisco, CA 94103 helpdesk ticketing service when providing support to
United States Customers. Zuora also uses ZenDesk’s cloud-based live chat
platform, self-service options and customer-support features
privacy@zendesk.com when providing support for its Services.
Standard Contractual Clauses
C. Zuora Affiliate Subprocessors
Name of Processing Registered Address/ Contact Description of Data Processing Services
Sub-Processor Location information Transfer Safeguards in case of Restricted Transfers
Zuora Australia Australia 104 Suite 13, Level 13 Zuora and Zephr may use these affiliates to provide the
Pty Limited 333-339 George Street following Services-related support:
Sydney NSW 2000 Australia ● Help Desk coverage
Attn: privacy@zuora.com ● Engineering/Product Development
Zuora Bulgaria Bulgaria Oborishte region, 5, Stara ● Support for technical operations related to the Services
EOOD Planina str., 5th floor ● Security
Bulgaria, Sofia City Zuora has executed Standard Contractual Clauses with each
Attn: privacy@zuora.com of its affiliates.
Zuora Costa Rica Costa Rica San José, Central
Sociedad de Mata Redonda
Responsabilidad Avenida las Américas
Limitada Torre Leumi
piso nueve
Attn: privacy@zuora.com
Zuora Germany Germany Oskar-von-Miller Ring 20
GmbH Munich, 80333 Germany
Attn: privacy@zuora.com
Zuora Germany Switzerland Ernst-Nobs-Platz 1
GmbH, 8004 Zurich, 2
München, Zweigni OG. Switzerland
ederlassung Zürich Attn: privacy@zuora.com
Zuora India India 9th Floor, Tower B World
Private Limited Trade Centre
Rajiv Gandhi Salai
Perungudi, Chennai Tamil
Nadu 600096
India
Attn: privacy@zuora.com
Zuora Italia S.r.l Italy Spaces Isola
Via Pola 11
Milan, 20124 Italy
Attn: privacy@zuora.com
Zuora Japan KK Japan 6-5, 1 Chome Marunouchi,
Chiyoda City, Tokyo Japan
Attn: privacy@zuora.com
Zuora Services United 1001 E. Hillsdale Blvd, Ste 500
LLC States; Foster City, CA 94404
France USA
(Branch Attn: privacy@zuora.com
Office)
Zuora Singapore, Singapore 2 Shenton Way #18-01
Pte. Ltd SGX Centre
Singapore 068804
Attn: privacy@zuora.com
Zuora Sweden AB Sweden United Spaces
Waterfront Building Klarabergs
viadukten 63SE-101 23
Stockholm, Sweden
Attn: privacy@zuora.com
Zuora UK Limited United 1 Dean Street
Kingdom London W1D 3RB UK
Attn: privacy@zuora.com
4
Last updated: June 10, 2026
Updates
Notification Date: September 1, 2021 - added Microsoft, Snowflake and Zendesk.
Notification Date: September 22, 2021 - added new location for Microsoft and Snowflake
Notification Date: September 30, 2022 - added Zuora Austria GmbH, Zuora Costa Rica Sociedad de Responsibilidad Limitada, Zephr US
Inc. as Zuora Affiliates.
Notification Date: September 13, 2023 - added Qualtrics and removed Akamai.
Notification Date: March 15, 2024 - added Zuora EOOD, Bulgaria, as Zuora Affiliate; removed Beijing Zu Ru Technology Limited
Company as Zuora Affiliate, which will no longer process personal data; added more detailed description of processing activities of each
Subprocessor; added Japan to list of Zuora AWS locations; changed location of processing for Qualtrics from US to Canada; added Twilio
and Userpilot as Subprocessors; added third party Subprocessors of Zephr to unify Zuora and Zephr subprocessor lists.
Notification Date: May 13, 2024 - added Google Cloud Platform; added Singapore data center to Zephr AWS locations.
Notification Date: October 22, 2024 - added Cloudflare as Zephr CDN provider; removed Zuora Austria GmbH affiliate from Zuora
Affiliates list.
Notification Date: June 24, 2025 - added Growfin and Redocly as subprocessors; removed Zephr UK Limited, Zephr US Inc.
Notification Date: August 8, 2025 - Updated Zuora Affiliates list.
Notification Date: January 27, 2026 - Added LexisNexis as subprocessor.
Notification Date: April 28, 2026 - Added processing description of Zuora AI Features enabled in Bedrock to AWS entry; added Germany
to Growfin processing locations; updated Zuora Affiliates list and addresses; added Stripe as subprocessor.
Notification Date: June 10, 2026 - Added Yuno as subprocessor.
5
Last updated: June 10, 2026