Zuora
Zuora declares 21 subprocessors, plus 11 of its own affiliates, in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Microsoft. No published changes since we first read it on Sep 22, 2026. 15 tracked vendors name Zuora as a subprocessor, including Validity, 2NDSITE Inc. (Freshbooks) and ConnectWise.
Not loaded by any published homepage.
Subprocessors CSV of Zuora's subprocessors · Atom feed of Zuora's subprocessors DORA draft CSV of Zuora's subprocessors as declared by Zuora what's this? ·
21 third parties, 11 affiliates.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services (AWS) AI | AWS provides secure cloud infrastructure for the storage and security of customer tenant (which includes personal data collected by customers while using Zuora and Zephr services). Data is transferred continuously. AWS Bedrock powers the Zuora AI Features, which may process personal data defined by the customer within AWS when enabled. Standard Contractual Clauses | ||
| Atlassian Pty Ltd | Transfer Safeguards in case of Restricted Transfers Zuora and Zephr use the Jira customer support/ticketing services platform when providing support to customers. Jira may be used to process certain customer-defined personal data in connection with such requests. Standard Contractual Clauses | ||
| B. Third Party | Data for non-storage/hosting purposes. | ||
| Boomi, LP | Boomi is an integration solution for Zuora's customers within the Zuora Billing Netsuite Connector, which provides seamless data exchange between Zuora and Netsuite. Boomi may process essential billing and financial information, such as customer names, addresses, payment details, and transaction history, as defined by the customer. Data is transferred on a schedule defined by the customer. Standard Contractual Clauses | ||
| Cloudflare, Inc. | Zephyr uses the Cloudflare Content Delivery Network (“CDN”) to optimize content delivery. CDNs are commonly used systems of distributed services that expedite the transmission of content. The CDN processes data at the point-of-presence closest to the location from which the end user is accessing the customer’s service, regardless of the customer’s location. Data is transferred in connection with end user access and use. Standard Contractual Clauses | ||
| EOOD | (● Security Zuora has executed Standard Contractual Clauses with each of its affiliates.) | ||
| Google Inc. | Zuora uses Google Cloud Platform (GCP) to offer the Secure Data Sharing for Snowflake feature to customers whose Snowflake account is hosted on GCP in the same customer-defined location. Data is transferred continuously. Standard Contractual Clauses | ||
| Growfin | Zuora uses Growfin to offer the Collections feature that processes invoice and customer contact details, invoice documents, payment and credit card details, as applicable. Data is transferred at periodic intervals. Standard Contractual Clauses | ||
| LexisNexis | LexisNexis ThreatMetrix provides the digital identity and risk intelligence that supports Zuora Fraud Protection, an add-on to Zuora Payments. ThreatMetrix evaluates event-level metadata and behavioral signals associated with payment and account activity to help assess fraud risk in real time. Data is shared on a per-event basis when fraud screening is triggered. Standard Contractual Clauses | ||
| Limitada | |||
| Microsoft Corporation | Zuora uses Microsoft's Power BI tools as part of Zuora Revenue Analytics to enable customers to create interactive visualizations and dashboards from their aggregated tenant data. Customers that use Zuora’s Secure Data Sharing feature and whose Snowflake Account is on Azure will also use Microsoft. Data is transferred continuously. Standard Contractual Clauses | ||
| Qualtrics, LLC | If a Customer chooses to provide feedback to Zuora using the feedback drawer within the application, Qualtrics sends Zuora’s product team a record of the feedback, along with the user’s Zuora user ID, the email address on their Zuora user | ||
| Redocly Inc. | Redocly hosts Zuora's Developer Center, providing an optional "Try It" console that enables customers to test APIs against their sandbox environments. Customers may use APIs to process personal information, including credit card or payment information. Any processing of personal data in this context is discretionary and as designed by the Customer. Standard Contractual Clauses | ||
| Responsabilidad | |||
| Snowflake, Inc. | Snowflake provides Zuora Revenue with a cloud-based data analytics service that enables Customers to aggregate their tenant data so that the data can be made available for analytical analysis and reports using Microsoft Power BI tools. Snowflake is only used for customers who have enabled Zuora Secure Data Sharing for Snowflake, Zuora Revenue Analytics or Zuora Warehouse. Data is transferred continuously. Standard Contractual Clauses | ||
| Sociedad de | |||
| Stripe, LLC | Zuora uses Stripe Financial Connections to support the Bank Account Verification feature. Stripe Financial Connections enables retrieval of bank account and balance information to perform account verification and balance refresh. Data is processed and transferred as part of the verification workflow initiated by the end user. Standard Contractual Clauses | ||
| Twilio Inc | Zuora uses Twilio for two-factor authentication via SMS, when this feature is enabled by the Customer. Data is transferred when feature is in use. Standard Contractual Clauses | ||
| USERPILOT, INC. | As a Customer uses Zuora Billing, Userpilot records the Customer’s Zuora user ID and information from their Zuora user profile, including business email address and name. Userpilot also records information about the user’s location in the application and details about the user’s browser. Data is transferred continuously as the user interacts with the application. Data is processed for the purpose of offering in-context assistance and announcements to users based on their individual usage of the application. Standard Contractual Clauses | ||
| Yuno Tecnologías, S.A.P.I. de C.V. | Yuno powers the payment processing functions for Zuora customers. Yuno processes payment method collection information, as well as submission and account information to manage Payments processing and to route payments transactions to the Customer’s chosen gateways and fraud providers. Data is transferred continuously. Standard Contractual Clauses | ||
| ZenDesk, Inc. | Zendesk operates a cloud-based customer support/ticketing services platform that Zuora and Zephr use as an online helpdesk ticketing service when providing support to Customers. Zuora also uses ZenDesk’s cloud-based live chat platform, self-service options and customer-support features when providing support for its Services. |
Zuora affiliates (11)
Web TechnologiesCSV of Zuora's web technologies · Atom feed of Zuora's web technologies
Zuora's homepage made 316 requests to 40 domains, 21 services controlled by another company, and 4 domains not identified.
21 third parties by category: Advertising 8Analytics 6Live chat 1Cookie compliance 1CDN 1Other 4
Third parties 21 · 114 requests
Salespeak Salespeak 18
Influ2, Inc. Influ2 4
Adform Adform 3
Font Awesome Font Awesome 2
Magnite, Inc. rubiconproject.com, tremorhub.com 2
Index Exchange Inc. casalemedia.com 1
UNPKG Unpkg web-vitals 5.0.1 1
Vidyard Vidyard 1
Unknown 4 · 8 requests
hpklbne62y3wpitjb6lc6zyxza0wobdv.lambda-url.us-west-2.on.aws22i9zfydr3.execute-api.us-west-2.amazonaws.comd17d545dtg43nl.cloudfront.netusbrowserspeed.com
First party 1 · 193 requests
Zuora Elementor 4.3.3 Google Analytics Google Font API HSTS Linkedin Ads LottieFiles Microsoft Clarity MySQL Nginx Open Graph PHP Priority Hints RankMath SEO Twitter Emoji (Twemoji) WP Engine WPML 4.9.7 WordPress core-js 3.32.2 jQuery 3.7.1 jQuery Migrate 3.4.1 193
10 tracked companies loaded by the homepage are not in Zuora's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (15)CSV of the companies listing Zuora · Atom feed of the companies listing Zuora
2NDSITE Inc. (Freshbooks) freshbooks.com Subscription Management and Billing
Absorb Software absorbai.com Absorb uses Zuora to manage the billing of our clients. Processing data is limited and may include client contact details for billing purposes.; Zuora Privacy Statement can be viewed here.
Accruent accruent.com Business Support
AVEVA aveva.com
BrowserStack browserstack.com Billing Application
CallRail callrail.com Billing and payment processing.
ConnectWise connectwise.com Subscription billing, revenue recognition, and analytics; Subscription management and billing automation platform
DataCamp datacamp.com Finance and payments; Subscription Management used for invoicing and payments
Extensis extensis.com
Forcepoint forcepoint.com SaaS
Otter Meeting Agent otter.ai Subscription Management & Billing
Pluralsight pluralsight.com Payment Processor
TCP Software tcpsoftware.com integrations partner – for billing/payment processing/subscription tracking
- Validity validity.com Business Operations; Subscription Management and Billing Automation
Virtuozzo virtuozzo.com Billing tool to manage customer subscriptions
Incidents reported by Zuora's subprocessorsCSV of incidents reported by vendors Zuora lists · Atom feed of incidents reported by vendors Zuora lists
225 reported incidents in the last 30 days, by 5 of the vendors Zuora lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Zuora was involved.
And 200 more. All of them: CSV · Who is around them.
ChangesCSV of Zuora's changes · Atom feed of Zuora's changes
See the list as we read it on any date: Time machine
None since tracking began.
Rating badge for Zuora's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/zuora"><img src="https://thirdpartyindex.com/badge/zuora.svg" alt="Zuora transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/zuora)