Introduction
On this page, we maintain a current list of Sub-Processors authorized to process Customer Data (which may include Personal Data) for Zscaler services and products (the “Products”).
Zscaler performs due diligence of the security and privacy practices of its Sub-Processors to ensure Sub-Processors provide a level of security and privacy appropriate to their access to Customer Data (which may include Personal Data) and the scope of the services they are engaged to provide. In addition, Zscaler requires its Sub-Processors to commit to written obligations regarding their security controls and protection of Personal Data.
Support Services Providers' Access to Data
Please note that in order for Zscaler or its Sub-Processor(s) to respond to a Customer support ticket, the Customer must (1) submit a support ticket and (2) authorize Zscaler and/or its Sub-Processor(s) to access the Customer’s Personal Data.
Requesting More Information About a Sub-Processor
Please contact us here to request additional information regarding the services a Sub-Processor provides to Zscaler such Sub-Processor's security controls, include any available third-party security reports or certifications.
Changes to Sub-Processor List
Customers can register at the Zscaler Trust Portal to receive notices regarding any changes or additions to this Sub-Processor List. Customers can object to a new Sub-Processor on reasonable grounds relating to the protection of Personal Data and by following the instructions provided in such notice.
Transfer Impact Assessment
As a global cloud service provider, Zscaler is committed to enabling Customers to use all Zscaler Products in compliance with data protection regulations, which includes continuous evaluation of jurisdictions to which Personal Data might be transferred. For additional information, please see the Zscaler Transfer Impact Assessment page.