Sub-processors — Zero Assist

All primary candidate-session and account data is stored and processed within India (OCI Mumbai). Most United States–based sub-processors below handle only website telemetry, transactional email, payments routing, or scheduling. One exception: our AI summarisation provider (Groq) receives de-identified session signals — never a candidate's name, employer, or device hostname — to generate the risk-summary narrative shown on the dashboard.

Where a Customer connects an Applicant Tracking System (e.g. Greenhouse or Lever), Zero Assist transmits session summaries to that system on the Customer's instruction. Those platforms act under the Customer's own controller relationship, not as Zero Assist sub-processors. The Customer controls whether the integration is enabled.

We maintain signed data-processing terms with each sub-processor as part of our SOC 2 readiness program. If we add or replace a sub-processor that processes candidate personal data, we will update this page. Customers may subscribe to change notifications by emailing and may object to a new sub-processor as described in our DPA.