Snapshot 49225
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Blitzz Help Center Solution home Advanced Compliance Blitzz Third-Party Sub-processors & Data Processing Blitzz is a data processor and uses sub-processors to assist in providing its services. A sub-processor is a third-party data processor engaged by Blitzz who may receive and process personal data submitted through Blitzz’s services by a controller. Authorized sub-processors are listed below along with a description of the services they provide and the location where data is hosted. Blitzz uses the sub-processors listed below to assist in providing services as described in our Terms of Service or a similar services agreement customers may have signed with us. Governance Blitzz partners with organizations that, like itself, adhere to global standards and regulations. In addition to evaluating technical requirements, Blitzz examines data protection measures, compliance with our security requirements, and security audit reports before closing any contract. Initial agreements include review and approval of breach notification provisions in the event of unwarranted data incidents, as well as necessary security measures for data protection. Blitzz commits to keeping this list updated regularly so that Controllers can stay informed of the scope of sub-processing associated with Blitzz services. Infrastructure Architecture Blitzz uses a tiered cloud infrastructure model designed for reliability, performance, and security: Primary infrastructure (Microsoft Azure): All core Blitzz SaaS applications are hosted on Azure. The majority of customer data is stored, processed, and transmitted through Azure data centers. Supporting services (Twilio, SendGrid): Real-time communication capabilities such as WebRTC video, SMS, WhatsApp messaging, and transactional email delivery are provided through Twilio and SendGrid. Optional / limited use (AWS, Google Cloud Platform): AWS and GCP are used on a limited basis for select supporting services such as analytics and compute. These providers do not host core Blitzz application data unless specifically agreed upon with the Controller. Blitzz holds control of and access to data hosted on all infrastructure services. Data resides in corresponding data center facilities based on the location or plan selected by the Controller (Blitzz customer) and remains in the selected data center unless shifted to ensure performance and availability of services, or as specifically agreed between the Controller and Blitzz. Authorized Sub-processors Note: Not all sub-processors listed below may apply to your account. The specific sub-processors involved depend on the Blitzz features and services enabled for your organization. Primary Infrastructure VENDOR PURPOSE DATA CENTERS LINK (External links for additional information relating to security) Microsoft Corporation Primary cloud infrastructure provider (Azure). Hosts all Blitzz SaaS applications and stores the majority of data processed and transmitted through Blitzz services. United States Privacy Program Supporting Services VENDOR PURPOSE DATA CENTERS LINK Twilio** Real-time communication provider. Powers WebRTC video, SMS, and WhatsApp messaging within the Blitzz application. United States Data Privacy; Data Security Twilio SendGrid Transactional email delivery. Handles programmatically triggered emails such as notifications and alerts sent from Blitzz applications. United States Security Policy Sinch SMS delivery for Canadian phone numbers. — Privacy Policy Daily.co Video calling infrastructure for select use cases, including Blitzz Cobrowse sessions. United States Privacy Policy Optional / Limited Use Infrastructure VENDOR PURPOSE DATA CENTERS LINK Amazon Web Services, Inc. Used on a limited basis for select supporting services such as analytics and compute. Does not host core Blitzz application data. United States Compliance Program; GDPR Centre; Supplementary Measures Addendum; Blog Google Cloud Platform Used on a limited basis for select data storage and processing services. Does not host core Blitzz application data. United States Data Privacy; Trust & Security; Blog AI Services VENDOR PURPOSE DATA CENTERS LINK OpenAI AI model provider powering intelligent features such as AI Knowledge Base, agent assistance, and automated troubleshooting within Blitzz products. United States Privacy Policy Anthropic AI model provider powering intelligent features such as AI Knowledge Base, agent assistance, and automated troubleshooting within Blitzz products. United States Privacy Policy Business Operations & Tools VENDOR PURPOSE DATA CENTERS LINK Firebase Analytics Mobile and web application crash reporting and diagnostics. United States Privacy and Security Stripe Payment processing for credit card and subscription transactions. United States Service Agreement Zoho Billing and subscription management, including invoices and renewal reminders. United States Privacy Policy Mailchimp (Intuit) Email marketing and campaign management for customer communications. United States Privacy Policy Freshworks Internal customer relationship management and support ticket tracking. United States Terms of Service HubSpot Customer relationship management, marketing automation, and sales engagement. United States Privacy Policy Slack (Salesforce) Internal team communication and collaboration. United States Security Practices Google Workspace Internal email, cloud storage, and productivity tools for Blitzz operations. United States Privacy Policy **Call recording is processed by Twilio and can be stored in your region of choice. For questions or objections regarding sub-processors, please write to [email protected]. Related Articles GDPR, LGPD, and HIPAA Compliance Is Blitzz HIPAA-compliant? Can I use Blitzz in Canada? Are email and texts invitations Privacy and HIPAA compliant? View all