Zuora
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | partial | 0 / 8 |
| Purposes | partial | 6 / 7 |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | not found | 0 / 5 |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 75 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Zuora's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/zuora"><img src="https://thirdpartyindex.com/badge/zuora.svg" alt="Zuora transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/zuora)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center statuspage | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot |
Subprocessors
22 third parties, 12 affiliates. CSV · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web | AWS provides secure cloud infrastructure for the storage and | ||
| Atlassian Pty Ltd | Zuora and Zephr use the Jira customer support/ticketing services platform when providing support to customers. Jira may be used to process certain customer-defined personal data in connection with such requests. Standard Contractual Clauses | ||
| B. Third Party | Data for non-storage/hosting purposes. | ||
| Boomi, LP | Boomi is an integration solution for Zuora's customers within the Zuora Billing Netsuite Connector, which provides seamless data exchange between Zuora and Netsuite. Boomi may process essential billing and financial information, such as customer names, addresses, payment details, and transaction history, as defined by the customer. Data is transferred on a schedule defined by the customer. Standard Contractual Clauses | ||
| Cloudflare, Inc. | Zephyr uses the Cloudflare Content Delivery Network (“CDN”) to optimize content delivery. CDNs are commonly used systems of distributed services that expedite the transmission of content. The CDN processes data at the point-of-presence closest to the location from which the end user is accessing the customer’s service, regardless of the customer’s location. Data is transferred in connection with end user access and use. Standard Contractual Clauses | ||
| EOOD | (● Security Zuora has executed Standard Contractual Clauses with each of its affiliates.) | ||
| Google Inc. | Zuora uses Google Cloud Platform (GCP) to offer the Secure Data Sharing for Snowflake feature to customers whose Snowflake account is hosted on GCP in the same customer-defined location. Data is transferred continuously. Standard Contractual Clauses | ||
| Growfin | Zuora uses Growfin to offer the Collections feature that processes invoice and customer contact details, invoice documents, payment and credit card details, as applicable. Data is transferred at periodic intervals. Standard Contractual Clauses | ||
| LexisNexis | LexisNexis ThreatMetrix provides the digital identity and risk intelligence that supports Zuora Fraud Protection, an add-on to Zuora Payments. ThreatMetrix evaluates event-level metadata and behavioral signals associated with payment and account activity to help assess fraud risk in real time. Data is shared on a per-event basis when fraud screening is triggered. Standard Contractual Clauses | ||
| Limitada | |||
| Microsoft Corporation | Zuora uses Microsoft's Power BI tools as part of Zuora Revenue Analytics to enable customers to create interactive visualizations and dashboards from their aggregated tenant data. Customers that use Zuora’s Secure Data Sharing feature and whose Snowflake Account is on Azure will also use Microsoft. Data is transferred continuously. Standard Contractual Clauses | ||
| Qualtrics, LLC | If a Customer chooses to provide feedback to Zuora using the feedback drawer within the application, Qualtrics sends Zuora’s product team a record of the feedback, along with the user’s Zuora user ID, the email address on their Zuora user | ||
| Redocly Inc. | Redocly hosts Zuora's Developer Center, providing an optional "Try It" console that enables customers to test APIs against their sandbox environments. Customers may use APIs to process personal information, including credit card or payment information. Any processing of personal data in this context is discretionary and as designed by the Customer. Standard Contractual Clauses | ||
| Responsabilidad | |||
| Services (AWS) | security of customer tenant (which includes personal data collected by customers while using Zuora and Zephr services). Data is transferred continuously. AWS Bedrock powers the Zuora AI Features, which may process personal data defined by the customer within AWS when enabled. Standard Contractual Clauses | ||
| Snowflake, Inc. | Snowflake provides Zuora Revenue with a cloud-based data analytics service that enables Customers to aggregate their tenant data so that the data can be made available for analytical analysis and reports using Microsoft Power BI tools. Snowflake is only used for customers who have enabled Zuora Secure Data Sharing for Snowflake, Zuora Revenue Analytics or Zuora Warehouse. Data is transferred continuously. Standard Contractual Clauses | ||
| Sociedad de | |||
| Stripe, LLC | Zuora uses Stripe Financial Connections to support the Bank Account Verification feature. Stripe Financial Connections enables retrieval of bank account and balance information to perform account verification and balance refresh. Data is processed and transferred as part of the verification workflow initiated by the end user. Standard Contractual Clauses | ||
| Twilio Inc | Zuora uses Twilio for two-factor authentication via SMS, when this feature is enabled by the Customer. Data is transferred when feature is in use. Standard Contractual Clauses | ||
| USERPILOT, INC. | As a Customer uses Zuora Billing, Userpilot records the Customer’s Zuora user ID and information from their Zuora user profile, including business email address and name. Userpilot also records information about the user’s location in the application and details about the user’s browser. Data is transferred continuously as the user interacts with the application. Data is processed for the purpose of offering in-context assistance and announcements to users based on their individual usage of the application. Standard Contractual Clauses | ||
| Yuno Tecnologías, S.A.P.I. de C.V. | Yuno powers the payment processing functions for Zuora customers. Yuno processes payment method collection information, as well as submission and account information to manage Payments processing and to route payments transactions to the Customer’s chosen gateways and fraud providers. Data is transferred continuously. Standard Contractual Clauses | ||
| ZenDesk, Inc. | Zendesk operates a cloud-based customer support/ticketing services platform that Zuora and Zephr use as an online helpdesk ticketing service when providing support to Customers. Zuora also uses ZenDesk’s cloud-based live chat platform, self-service options and customer-support features when providing support for its Services. Standard Contractual Clauses |
Zuora affiliates (12)
Listed as a subprocessor by (5)
Purposes as each company states them.
AVEVA aveva.com
DataCamp datacamp.com Finance and payments; Subscription Management used for invoicing and payments
Forcepoint forcepoint.com SaaS
Otter Meeting Agent otter.ai Subscription Management & Billing
Pluralsight pluralsight.com Payment Processor
Changes
None since tracking began.