Zephyra (QTool SRL) uses the following subprocessors to provide the Services. We notify customers in advance of material additions or replacements per our DPA.
Infrastructure & hosting
| Provider | Purpose | Region |
|---|---|---|
| Google Cloud Platform | Marketing website hosting (Cloud Storage + Cloud CDN + Load Balancer) | EU / US (global CDN edges) |
| Microsoft Azure | Product application hosting (app.zephyra.tech) | EU |
| Amazon Web Services | Selected compute workloads (on demand) | EU |
Security & compliance
| Provider | Purpose | Region |
|---|---|---|
| Cloudflare | Bot protection (Turnstile CAPTCHA) on forms | Global edge |
| Google Cloud Secret Manager | Secrets management for application credentials | EU |
Communications
| Provider | Purpose | Region |
|---|---|---|
| SendGrid (Twilio) | Transactional and lifecycle email delivery | EU |
| HubSpot | CRM, sales pipeline, marketing contact management | EU |
Analytics & monitoring
| Provider | Purpose | Region |
|---|---|---|
| Google Analytics 4 | Site analytics (consent-gated) | EU / US |
| Google Tag Manager | Tag orchestration | EU / US |
| Amplitude | Product analytics (consent-gated) | EU |
| Microsoft Clarity | Heatmaps & session replays (consent-gated, masked) | EU |
| Sentry | Error and performance tracking (EU residency) | EU |
| Cookiebot | GDPR consent management | EU |
Billing
| Provider | Purpose | Region |
|---|---|---|
| Stripe | Subscription billing, payment processing, invoicing | EU / US |
Notes
- All providers listed above are bound by appropriate data-processing terms (DPA or equivalent).
- Where personal data leaves the EEA/UK/Switzerland, transfers are covered by EU Standard Contractual Clauses, UK IDTA, or equivalent safeguards.
- Consent-gated analytics and marketing tags do not load until a visitor grants consent via the Cookiebot banner.
Changes
When we add, replace, or materially change a subprocessor, we update this list and (where the DPA requires it) notify customers per the DPA.
For questions about subprocessors or to raise an objection per your DPA, contact info@qtoolsrl.it.