Legal · Data processing

Data processing.
Clearly documented.

See which providers support Zencal, why they process data and where that processing takes place.

Data Processing Agreement Sub-processors list Last updated: August 2026

01 · Introduction

Who processes data for Zencal?

This page lists all sub-processors that Zencal sp. z o.o. ("Zencal", "we", "us") engages to process personal data on behalf of our customers in connection with the provision of our services.

In accordance with our Data Processing Agreement, we will notify customers of any intended changes concerning the addition or substitution of sub-processors at least 14 days prior to such change.

02 · Current sub-processors

The services behind Zencal.

17 current providers

The following sub-processors are currently engaged by Zencal:

Sub-processorPurposeProcessing location
DigitalOcean, LLC Cloud infrastructure and hosting EU (Frankfurt, Germany)
Google LLC Calendar synchronisation (Google Calendar API) EU/US (Standard Contractual Clauses)
Microsoft Corporation Calendar synchronisation (Microsoft 365, Outlook), video conferencing (Microsoft Teams) EU/US (Standard Contractual Clauses)
Apple Inc. Calendar synchronisation (iCloud Calendar) EU/US (Standard Contractual Clauses)
Zoom Video Communications, Inc. Video conferencing integration EU/US (Standard Contractual Clauses)
Stripe, Inc. Payment processing EU (Ireland)
Autopay S.A. Payment processing EU (Poland)
PayU S.A. Payment processing EU (Poland)
Przelewy24 (PayPro S.A.) Payment processing EU (Poland)
inFakt Sp. z o.o. Accounting integration EU (Poland)
Fakturownia Sp. z o.o. Accounting integration EU (Poland)
Web INnovative Software Sp. z o.o. (wFirma.pl) Accounting integration EU (Poland)
IFIRMA S.A. Accounting integration EU (Poland)
HubSpot, Inc. / HubSpot Ireland Limited CRM integration EU/US (Standard Contractual Clauses)
Twilio Inc. (SendGrid) Email delivery EU/US (Standard Contractual Clauses)
SMSAPI (Link Mobility Poland sp. z o.o.) SMS notifications EU (Poland)
Cloudflare, Inc. Content delivery network, DDoS protection EU (Standard Contractual Clauses)

03 · Data protection measures

Safeguards travel with the data.

All sub-processors listed above have implemented appropriate technical and organizational measures to ensure that personal data is processed at a level that meets the requirements of the General Data Protection Regulation (GDPR).

Where sub-processors are located outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

04 · Changes and contact

Changes do not happen silently.

We may update this list from time to time. Customers who have entered into a Data Processing Agreement with us will be notified of any changes at least 14 days prior to the engagement of a new sub-processor.

Questions about data processing?hello@zencal.io

05 · Related documents

The complete legal context.