Public URL: https://zippendo.com/legal/subprocessor-list
This section lists the sub-processors Zippendo engages to process personal data on behalf of our business customers. It corresponds to Appendix B of our Data Processing Agreement (DPA).
Core Sub-processors (Active for all accounts)
These subprocessors provide the baseline infrastructure, database storage, and operational stability required to run the Zippendo SaaS platform:
| Sub-processor | Functional Category | Purpose of Processing | Location |
|---|---|---|---|
| Cloudflare, Inc. | Edge Network & Security | Reverse proxy, secure connection handling, content delivery, WAF, bot management, and DDoS protection across platform endpoints | Global edge network / USA (EU-US DPF & EU SCCs) |
| Hetzner Online GmbH | Cloud Hosting | Primary cloud infrastructure, application servers, temporary file caching, and secure object storage for shipping labels. | Germany (EU/EEA) |
| Neon, Inc. | Database Hosting | Secure cloud-hosted relational database hosting and daily encrypted database backups (rolling backup retention overwritten within 30 days). | Germany (EU/EEA) |
| Resend, Inc. | Communication | Transactional email delivery (such as login codes, team invitations, and billing alerts). | Ireland (EU/EEA) |
| PostHog, Inc. | Diagnostics & Analytics | Application error tracking, service diagnostic logs (14-day retention), product usage analytics, and masked session replays. | Germany (EU/EEA) / USA (subject to DPF & SCCs) |
| Mapbox, Inc. | Location Services | Interactive mapping, structural address autocompletion, and geocoding services. | EU / USA (subject to DPF & SCCs) |
| GitHub, Inc. | Deployment | Secure code hosting, continuous integration, and secure pipeline deployment pipelines. | USA (subject to DPF) |
Feature-Gated Sub-processors (Opt-in only)
These subprocessors are only engaged if you activate optional platform features (such as the Zippy AI Assistant):
- Anthropic, PBC (USA — subject to EU Standard Contractual Clauses, Module 3 (Processor-to-Processor)) — Processing natural language queries for the optional Zippy AI Assistant. Model training on customer data is strictly disabled.
Integrated Carriers (Independent Data Controllers — Not Sub-processors)
Carriers that you connect to your Zippendo account (e.g., PostNord, Bring, GLS, DAO, Danske Fragtmænd, DSV, DHL, FedEx, UPS, Matkahuolto, Posti, PostNL, DPD Polska, DPD Switzerland, DPD Hungary, DPD Belgium, DPD Latvia, DPD Lithuania, Helthjem, Royal Mail, Instabee) are independent data controllers, not subprocessors of Zippendo. They process transport and shipping data under their own terms and privacy policies. Enabling a carrier integration inside your Zippendo dashboard is your direct documented instruction to us to transfer the shipment data to that carrier to generate your shipping labels and book your transport.
Customer-Configured Marketing and Automation Integrations (Independent Disclosures — Not Sub-processors)
Any third-party marketing platforms, notification gateways, and workflow automation services that you connect to your Zippendo account (e.g., Customer.io, Klaviyo, SendGrid, Make) using your own API credentials, webhooks, or vendor accounts are independent third-party services operated under your own authority. These platforms are not subprocessors of Zippendo. Activating or configuring these integrations inside your dashboard constitutes your direct, documented instruction to Zippendo to transmit the designated data payloads to those endpoints on your behalf.
Changelog and Updates
- 2026-10-07: Added carriers as opt-in independent controllers: DHL Parcel Benelux (Netherlands / Belgium / Luxembourg), DHL eCommerce Europe (Europe), DPD Switzerland (Switzerland), DPD Hungary (Hungary), DPD Belgium (Belgium / Luxembourg), DPD Latvia (Latvia), DPD Lithuania (Lithuania), GLS Croatia, GLS Czech Republic, GLS Hungary, GLS Slovakia and GLS Romania, DSV XPress, DSV Road and DSV Road (DB Schenker) (DSV, Denmark), Danske Fragtmænd (Denmark), Helthjem (Norway) and Posti (Finland).
- 2026-09-21: Added carrier: PostNL (Netherlands / Belgium) as an opt-in independent controller.
- 2026-09-21: Added carrier: Royal Mail (United Kingdom, via Click & Drop) as an opt-in independent controller.
- 2026-09-21: Added carrier: DPD Polska (Poland) as an opt-in independent controller.
- 2026-09-09: Added Cloudflare, Inc. (edge network, WAF, and bot mitigation) to the core sub-processor list. Cloudflare provides reverse proxy, DDoS mitigation, and edge security across our platform endpoints. Cloudflare has provided these services across our platform endpoints since launch; this entry corrects an administrative omission in our published sub-processor list.
- 2026-08-20: Switched billing provider from LedgerBee Technologies A/S to Stripe (Stripe Payments Europe, Limited, Ireland; card payments processed on Stripe's hosted pages) and added Visma e-conomic A/S (Denmark) as accounting provider for statutory bookkeeping. Both are processed as Zippendo's own vendors for billing/accounting data, not subprocessors of customer shipment data. Added phone number requirement to registration and updated data categories.
- 2026-08-12: Updated backup retention policies to a standard, abstract timeline (maximum 30 days) to prevent vendor lock-in. Changed sub-processor change notification windows from 30 days to 14 days with emergency replacement clauses. Removed specific server-level configuration references and cleaned up developer comments.
- 2026-08-04: Added carriers: UPS (United Parcel Service) and Matkahuolto (Finland) as opt-in independent controllers.
- 2026-07-21: Switched billing provider to LedgerBee Technologies A/S (processed as Zippendo's own vendor, not a subprocessor of customer shipment data). Replaced error-tracking and logging pipelines with integrated, EU-residency diagnostic pipelines with a 14-day rolling retention.