1. What Is a Subprocessor?
A subprocessor is any vendor, service provider, or partner that processes personal data on our behalf to help deliver the Visibility Zone service. Under data protection laws like the GDPR and CCPA, we are required to disclose subprocessors to you and notify you of changes.
Subprocessors include cloud infrastructure providers, content delivery networks, payment processors, analytics vendors, and AI model providers. We select subprocessors based on their ability to meet our security, privacy, and compliance standards.
2. Our Subprocessors
The following table lists our current subprocessors. We use these vendors to operate our infrastructure, protect against threats, and deliver core features of the Service:
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Hetzner Online GmbH | Dedicated server hosting and infrastructure | All service data at rest (account information, monitoring data, analysis results, API usage logs) | Germany (EU) |
| Cloudflare, Inc. | CDN, DNS, WAF and DDoS protection; TLS termination | Traffic metadata, IP addresses, request headers, DNS queries | United States / global edge network |
| OpenAI, L.L.C. | Large language model processing for analysis and AI-answer evaluation features | Text and image content submitted for analysis where the feature is enabled | United States |
| Google LLC | Gemini model access and Google API data sources used by monitoring features | Query text and brand identifiers for AI evaluation; search results and public data for rank tracking and monitoring | United States |
3. Optional Third-Party AI Models
Some Visibility Zone features include optional integrations with third-party large language models (LLMs) and AI services. When you enable these features, data may be sent to OpenAI, Google, or other AI providers to perform analysis, evaluation, or comparison tasks.
You have control over these features: You can request at any time that optional third-party AI model features be disabled for your account. To do so, contact us at [email protected] with Attn: Account Settings, and we will disable those features without charge. Once disabled, your data will not be sent to external AI providers for those features, though Visibility Zone's own analysis tools will continue to operate.
4. Notifications and Your Rights
4.1 How to Subscribe to Notifications
Visibility Zone provides thirty (30) calendar days' written notice before adding a new subprocessor or making a material change to an existing subprocessor's processing activities. To subscribe to change notifications, email [email protected] with the subject line "Attn: Subprocessor Notifications." Include your organization name and account contact. We will add you to our notification list, and you will receive updates via email at the address provided.
4.2 Your Right to Object
If you object to our use of a new or changed subprocessor on data-protection grounds, you may notify us in writing (to [email protected], Attn: Legal) within the thirty-day notice period. We will work with you in good faith to address your concerns. If we cannot resolve the objection to your satisfaction, you may terminate the affected service without penalty by providing written notice within thirty (30) days of the subprocessor's effective date. Termination of a service is optional; you are not required to terminate unless you choose to exercise this right.
4.3 When This Page Is Updated
We update this page whenever a subprocessor is added, removed, or materially changes its processing role. The "Last reviewed" date at the top of this page indicates when we last reviewed and updated the subprocessor list. We may also update this page for clarification or correctness without a separate notification to all customers.
5. Infrastructure Security
Certifications and Compliance. Infrastructure providers such as Hetzner, Cloudflare, and Google maintain their own independent security certifications and compliance attestations (including SOC 2, ISO 27001, and others), which are available on their respective websites. Visibility Zone does not itself hold a SOC 2 or ISO 27001 attestation at this time. Visibility Zone implements technical and organisational security measures as described in the Data Processing Addendum, Section 7.
While our subprocessors maintain high security standards, Visibility Zone is responsible for selecting vendors that meet our data protection requirements and for managing the security of personal data processed through the Visibility Zone service. For detailed information about our security practices, please see our Privacy Policy and Data Processing Addendum.
If you have questions about our subprocessors, their security practices, or how your data is processed, please contact us at [email protected].