Approved Subprocessors
Effective Date: September 1, 2026
This page identifies the third-party subprocessors authorized by SZG Labs, LLC to process client data, host infrastructure, or assist in service delivery under our Data Processing Agreements (DPAs) and Master Services Agreements.
| Entity | Location | Processing Task & Service Scope |
|---|---|---|
| Amazon Web Services, Inc. | United States | Cloud infrastructure, relational databases, secure object storage, and networking for SZG Labs applications and client production environments. |
| Google Cloud Platform (GCP) | United States | Cloud hosting, managed compute instances, Vertex AI enterprise infrastructure, and Odoo.sh staging environments. |
| Zoho Corporation | United States | Cloud billing ledger, automated invoice dispatch, client portal management, and Level 1 PCI-compliant merchant payment processing (Zoho Payments). |
| Common Paper, Inc. | United States | Digital contract execution, electronic signatures, and Statements of Work (SOW) management. |
| Odoo S.A. | Belgium / United States | Odoo Enterprise core software licensing, module repository distribution, and Odoo.sh managed cloud hosting. |
| GitHub, Inc. (Microsoft) | United States | Source code version control, automated CI/CD deployment pipelines, and dependency vulnerability scanning. |
| Enterprise AI Inference Providers (OpenAI, LLC / Anthropic, PBC / Google Cloud) |
United States | Ephemeral API model inference for custom Agentic AI workflows and automated ETL pipelines (governed by commercial zero-data-retention agreements). |
| Authorized Subcontractor Engineering Partners | United States | Senior software architecture, module development, and technical maintenance services bound by written confidentiality and DPA agreements. |
Notice of Subprocessor Modifications
As provided in our Data Processing Agreement, SZG Labs maintains an active list of approved subprocessors. In the event of an addition or replacement of a subprocessor that impacts customer personal data, SZG Labs will provide at least 10 business days' prior written notice (via email or website notification), enabling clients to review or raise reasonable objections within the contractual objection period.
Questions & Inquiries
If you have any questions regarding our subprocessor network or data security standards, please contact our compliance team at [email protected].