# Data Zoo

Data Zoo declares [17 subprocessors](https://thirdpartyindex.com/vendors/data-zoo#subprocessors) in [its subprocessor list](https://datazoo.com/policy/data-sub-processor-list), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/2903)). They include [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [Microsoft](https://thirdpartyindex.com/vendors/microsoft) and [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare). No published changes since we first read it on 2026-09-22. [2 tracked vendors](https://thirdpartyindex.com/vendors/data-zoo#used-by) name Data Zoo as a subprocessor, including [Stripe](https://thirdpartyindex.com/vendors/stripe) and [Ping Identity](https://thirdpartyindex.com/vendors/ping-identity).

Data Zoo (datazoo.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/data-zoo
- Documents last verified: 2026-11-11
- Transparency rating: 67/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 13 tracked vendors directly, 157 within two hops, 512 within three; 2 tracked vendors rely on it directly, 946 within two hops, 2290 within three
- Cite as: Data Zoo, Third Party Index, https://thirdpartyindex.com/vendors/data-zoo (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.datazoo.com/ | 2026-11-11 | 2026-11-03 |
| Subprocessor list | https://datazoo.com/policy/data-sub-processor-list | 2026-11-11 | 2026-09-22 |
| Privacy policy | https://datazoo.com/policy/privacy-policy | 2026-11-11 | 2026-09-23 |
| Terms | https://datazoo.com/policy/terms | 2026-11-11 | 2026-09-22 |

## Subprocessors (17)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Aha!](https://thirdpartyindex.com/vendors/aha-labs.md) | Ideas Management (Roadmaps/Ideas/Develop) | HQ Location / Entity Country/ Addres: USA; Service Delivery/ Processing Location(s): Global; Service Delivery/ Processing Location(s): USA | 2026-09-22 |
| [Atlassian](https://thirdpartyindex.com/vendors/atlassian.md) | Bug and Issue Tracking; Task Tracking; Technical Project Management | HQ Location / Entity Country/ Addres: Australia; Service Delivery/ Processing Location(s): Australia; Service Delivery/ Processing Location(s): Ireland; Service Delivery/ Processing Location(s): USA | 2026-09-22 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Cloud Hosting Provider and content delivery; Denial-of-service protection (DDOS); Load balancing and processing of traffic (inspection and blockage in case of malicious activity) between customer and Data Zoo services; Website and application security | HQ Location / Entity Country/ Addres: United States of America; Service Delivery/ Processing Location(s): Global | 2026-09-22 |
| CrushFTP | Secure File Transfers in the provision of IDV Services Including POC and Batch Processing | HQ Location / Entity Country/ Addres: 297 Kingsbury Grade Ste 10, Stateline, Nv 89449; HQ Location / Entity Country/ Addres: Nevada, United States of America; Service Delivery/ Processing Location(s): Global; Service Delivery/ Processing Location(s): USA | 2026-09-22 |
| [DocuSign](https://thirdpartyindex.com/vendors/docusign.md) | Electronic Signature Platform to sign, send and manage contracts | HQ Location / Entity Country/ Addres: San Francisco, United States of America; Service Delivery/ Processing Location(s): Global; Service Delivery/ Processing Location(s): USA | 2026-09-22 |
| [Employment Hero](https://thirdpartyindex.com/vendors/employment-hero.md) | HR Management; Payroll and Employee benefits | HQ Location / Entity Country/ Addres: Level 2, 439-441 Kent Street, Sydney, NSW 2000, Australia; Service Delivery/ Processing Location(s): Australia | 2026-09-22 |
| [Functional Software, Inc. (dba Sentry.io)](https://thirdpartyindex.com/vendors/sentry.md) | Error and Performance monitoring; Monitor logs and events. | HQ Location / Entity Country/ Addres: 45 Fremont Street, 8th Floor; HQ Location / Entity Country/ Addres: CA 94105; HQ Location / Entity Country/ Addres: San Francisco; Service Delivery/ Processing Location(s): USA | 2026-09-22 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Cloud Infrastructure Services | HQ Location / Entity Country/ Addres: 1600 Amphitheatre Parkway; HQ Location / Entity Country/ Addres: CA 94043; HQ Location / Entity Country/ Addres: Mountain View; Service Delivery/ Processing Location(s): Frankfurt, Germany; Service Delivery/ Processing Location(s): Singapore, Singapore; Service Delivery/ Processing Location(s): Sydney, Australia | 2026-09-22 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | Inbound marketing and sales support | HQ Location / Entity Country/ Addres: 2 Canal Park, Cambridge, MA 02141, USA; Service Delivery/ Processing Location(s): Dublin (secondary AWS server); Service Delivery/ Processing Location(s): Germany (primary AWS server), | 2026-09-22 |
| Intech Solution Pty Ltd | Address Cleansing Services | HQ Location / Entity Country/ Addres: Level 7, 35 Spring St, Bondi Junction, NSW, 2022, Australia; Service Delivery/ Processing Location(s): Australia | 2026-09-22 |
| [Microsoft Office](https://thirdpartyindex.com/vendors/microsoft.md) | Communication and collaboration, Storage, | HQ Location / Entity Country/ Addres: United States of America; Service Delivery/ Processing Location(s): Australia | 2026-09-22 |
| [Postman](https://thirdpartyindex.com/vendors/postman.md) | Monitoring and testing of Data Zoo API requests and responses, and testing of external data source APIs. | HQ Location / Entity Country/ Addres: 201 Mission Street; HQ Location / Entity Country/ Addres: San Francisco, CA 94105; HQ Location / Entity Country/ Addres: Suite 2375; Service Delivery/ Processing Location(s): Australia; Service Delivery/ Processing Location(s): New Zealand | 2026-09-22 |
| Regula Baltija LLC | OCR Technology and Document Authentication Technology | HQ Location / Entity Country/ Addres: 34 Visku St, Daugavpils, LV-5410, Latvia; Service Delivery/ Processing Location(s): Australia | 2026-09-22 |
| [Slack Technologies, Inc.](https://thirdpartyindex.com/vendors/slack.md) | Internal Communication Tool | HQ Location / Entity Country/ Addres: United States of America; Service Delivery/ Processing Location(s): USA | 2026-09-22 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | GRC Compliance Tool- | HQ Location / Entity Country/ Addres: United States of America; Service Delivery/ Processing Location(s): USA | 2026-09-22 |
| Voyager | IT Infrastructure provider of our NZ Server to facilitate Batch and POC Services. | HQ Location / Entity Country/ Addres: New Zealand; Service Delivery/ Processing Location(s): New Zealand | 2026-09-22 |
| [Xero](https://thirdpartyindex.com/vendors/xero.md) | Accounting Software | HQ Location / Entity Country/ Addres: Australia; Service Delivery/ Processing Location(s): Australia | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/2903)). CSV: https://thirdpartyindex.com/vendors/data-zoo/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/191763))
- Claimed: CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/13972))

## Web Technologies

Data Zoo's homepage made 61 requests to 5 domains, and 3 services controlled by another company. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

3 third parties by category: Analytics 2 (posthog, Google Cloud); Cookie compliance 1 (CookieYes). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (3)

- CookieYes: 9 requests to cdn-cookieyes.com, cookieyes.com; CookieYes
- posthog: 3 requests to posthog.com; PostHog
- Google Cloud: 1 request to googletagmanager.com; Google Analytics, Google Tag Manager (its subprocessor list names it too)

### First party (1)

- Data Zoo: 48 requests to datazoo.com; HSTS, Linkedin Insight Tag, LottieFiles, Lucide, Next.js 14.2.35, Next.js App Router, Open Graph, Priority Hints, React, Vercel, Vercel Analytics, Webpack

2 tracked companies loaded by the homepage are not in Data Zoo's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (2)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Ping Identity](https://thirdpartyindex.com/vendors/ping-identity.md): Offering provides real-time identity verification by accessing authoritative data sources
- [Stripe](https://thirdpartyindex.com/vendors/stripe.md): Identity verification for End Customers of Business Users

## Incidents reported by Data Zoo's subprocessors

Incidents reported in the last 30 days on their own status pages by 6 vendors Data Zoo lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported US issues feed throwing intermittent errors (minor)
- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Account emails not being delivered (major)
- 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported EU region replay ingestion latency (minor)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Data Zoo lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-10: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Data Zoo lists as a subprocessor, reported Global: Xero Partner Hub - Some slowness or unable to access pages in Partner Hub (major)
- 2026-11-09: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Data Zoo lists as a subprocessor, reported UK: HMRC connected services - MTD IT and MTD VAT (minor)
- 2026-11-06: [Aha Labs](https://thirdpartyindex.com/vendors/aha-labs#status), which Data Zoo lists as a subprocessor, reported Elevated error rates for some customers (no impact stated)
- 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Ingestion delays across all data (minor)
- 2026-11-03: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Data Zoo lists as a subprocessor, reported Missing check results for GitHub pull requests (minor)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Delays in spans and transactions processing (major)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Sentry.io dashboard and API is down (critical)
- 2026-11-02: [Employment Hero](https://thirdpartyindex.com/vendors/employment-hero#status), which Data Zoo lists as a subprocessor, reported Error Saving Management Notes (minor)
- 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Sentry dashboard is down (critical)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Data Zoo lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-10-29: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Data Zoo lists as a subprocessor, reported Incorrect security-training and background-check test results (no impact stated)
- 2026-10-28: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Data Zoo lists as a subprocessor, reported Global: Xero - customers are experiencing issues across Xero (critical)
- 2026-10-27: [Employment Hero](https://thirdpartyindex.com/vendors/employment-hero#status), which Data Zoo lists as a subprocessor, reported Users unable to load expense management (major)
- 2026-10-27: [Employment Hero](https://thirdpartyindex.com/vendors/employment-hero#status), which Data Zoo lists as a subprocessor, reported HR Platform currently experience a 504 error (critical)
- 2026-10-26: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Data Zoo lists as a subprocessor, reported Global: Xero - some customers may be experiencing intermittent errors in Xero. (minor)
- 2026-10-25: [Employment Hero](https://thirdpartyindex.com/vendors/employment-hero#status), which Data Zoo lists as a subprocessor, reported Investigating: Issue accessing employee files (major)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Data Zoo lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Data Zoo lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Increased latency processing integration webhooks (minor)
- 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Data Zoo lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Sentry.io not loading in US region (critical)
- 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Sentry.io not loading (major)
- 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Sentry is down (critical)
- 2026-10-15: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Data Zoo lists as a subprocessor, reported Global: Subscriptions - some customers are unable to purchase and management subscriptions (minor)
- 2026-10-14: [Employment Hero](https://thirdpartyindex.com/vendors/employment-hero#status), which Data Zoo lists as a subprocessor, reported Users are encountering an error message when submitting timesheets on the Employment Hero Work App (major)
- 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Data Zoo lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major)
- 2026-10-14: [Xero](https://thirdpartyindex.com/vendors/xero#status), which Data Zoo lists as a subprocessor, reported Global: Xero - Some customers may be experiencing some errors in product and inability to view invoice PDFs. (major)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/data-zoo

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
