Sub-processors
Last updated: 14 November 2026
ABOUT
“NetZero”, “we”, and related terms refer to NetZero SAS and, where applicable, its affiliates. “Customer” refers to any organisation on whose behalf a NetZero entity processes personal data under a data processing agreement.
In cases where a NetZero entity acts as a data processor, we may rely on the following sub-processors to process personal data.
LIST OF SUB-PROCESSORS
| Legal entity | Country | Service and purpose | Hosting region |
|---|---|---|---|
| Anthropic, PBC | United States | Claude: generative AI services | United States |
| AvePoint Inc. | United States | AvePoint Cloud Backup: backup and recovery | European Union |
| Celonis Inc. | United States | Make: workflow automation | European Union, United States |
| ConnectWise, LLC | United States | ScreenConnect: remote support and access | European Union |
| Jotform Ltd. | United Kingdom | Jotform: online forms and workflows | European Union |
| Microsoft France SAS | France | Microsoft 365: productivity and collaboration, identity and security, device management Azure: cloud hosting |
European Union, Brazil |
| Tailscale Inc. | United States | Tailscale: virtual private network | European Union, United States |
| Totvs S.A. | Brazil | Totvs Cloud: enterprise resource planning | Brazil |
A NetZero entity may also engage other NetZero group entities to assist with the processing, in which case assisting entities are sub-processors. Current entities that may act as sub-processors are NetZero SAS (France) and NetZero Brasil Biochar Ltda. (Brazil).
ONWARD SUB-PROCESSORS
Each sub-processor listed above engages its own sub-processors. These onward sub-processors are disclosed in each sub-processor's own published documentation.
CHANGES TO THIS LIST
NetZero will inform its customers of any new or replacement sub-processor at least 14 days before the change takes effect. Customers may object to such a change on reasonable data protection grounds, as provided in their agreement with NetZero.
INTERNATIONAL TRANSFERS
Where personal data originating in the European Economic Area (EEA) is transferred outside the EEA, NetZero relies on appropriate transfer mechanisms under Chapter V GDPR, including European Commission Standard Contractual Clauses (Implementing Decision 2021/914) and, where applicable, EU-US Data Privacy Framework certification.
Where personal data originating in Brazil is transferred outside Brazil, NetZero relies on transfer mechanisms recognised under LGPD Article 33, including the Standard Contractual Clauses approved by ANPD under Resolution CD/ANPD No. 19/2024.
CONTACT
Questions about sub-processors may be directed to privacy@netzero.green.