Sub-processors
Last updated August 26, 2026
zmist uses a small number of third-party providers ("sub-processors") to run the Service. Each one only processes what it needs to do its job, and none is permitted to use your data for its own purposes. This page is the current list; we update it here before bringing a new sub-processor online.
Active
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Hetzner Online GmbH | Application servers and database hosting | All account, channel, template, and signal data | European Union |
| Cloudflare, Inc. | DNS and network protection in front of web traffic | Connection metadata (IP address, request timing) | Global edge network |
| S3-compatible object storage | Storage of avatar and channel images you upload | Uploaded image files and their keys | European Union |
| SMTP email provider | Transactional email only (password reset, 2FA codes, channel invites, account-deletion confirmation) | Recipient email address and message contents | May process outside the EU under Standard Contractual Clauses |
Where a specific provider isn't named above, it's because the choice is still being finalised - email support@zmist.co if you need the current detail for a vendor assessment.
Planned (not yet active)
These are on the roadmap and will move to the "Active" table, with full detail, before they process any user data:
- A privacy-friendly, cookieless analytics provider for aggregate usage on this marketing site.
- An LLM provider for the optional AI-generated report feature (only the channel data you choose to summarise would be sent).
- Web-push and Apple Push Notification services for notifications you opt into.
- A payment provider, if and when paid plans launch.
Changes
We'll update the date at the top of this page whenever this list changes. Questions: support@zmist.co.