Policy
Subprocessors
The third parties ZeroWidth uses to deliver the service.
We publish this list so customers always know who has potential access to data passing through the service.
ZeroWidth uses a small set of third-party services to operate the product. Each is bound by a data-processing agreement that imposes obligations no less protective than our own Data Processing Addendum.
Current set
| Subprocessor | Purpose |
|---|---|
| Google Cloud Platform | Application hosting, primary database, object storage, image registry |
| WorkOS | Authentication and single sign-on — email addresses and sign-in identity |
| SendGrid (Twilio) | All email — transactional (invites, confirmations, security notifications, contact-form delivery) and opt-in newsletter sends; holds mailing-list opt-in state |
| Cloudflare | Bot protection (Turnstile) on public forms — visitor IP address and browser signals |
| Twilio | SMS transport for the shared messaging number — phone numbers and message content |
| OpenRouter | AI model routing — content of requests sent to configured model providers |
| Stripe | Billing, payment processing, invoicing |
All subprocessors process data in the United States.
Direct AI provider configuration
When a workspace configures an AI provider directly (instead of routing through OpenRouter), the content sent through that flow is forwarded to the provider under the API key the workspace supplies. ZeroWidth acts as a conduit only; the provider's own terms govern that data. The workspace owner is in control of which providers are configured — removing a key from a workspace immediately stops new requests while in-flight ones complete.
Notice of changes
When we add, replace, or remove a subprocessor we'll notify workspace administrators by email with reasonable advance notice before the change takes effect. You can object to the change on reasonable grounds; if we can't resolve the objection together, you may terminate the affected services per the Terms.
To subscribe to subprocessor change notifications independently of your workspace role, email contact@zerowidth.ai with "Subprocessor notifications" in the subject.
Change log
- 2026-07: Removed Loops, which was listed in error — SendGrid is the email subprocessor for both transactional and newsletter email.
- 2026-07: Added Cloudflare (Turnstile bot protection on public forms).
- 2026-06: First publication.
Contact
For subprocessor questions: contact@zerowidth.ai.
ZeroWidth, LLC