Compliance
- EUGDPR In placeEU hosting, DPA in every contract, SCCs for transfers
- UKUK GDPR In placeUK Addendum to the SCCs where relevant
- FIEU data residency In placeApp, database and backups in Helsinki, Finland
- SOCSOC 2 Not certifiedNot certified. Security questionnaires answered on request
- PHIHIPAA Not certifiedNot offered: don't use Zetra for protected health information
Resources
- Security overviewHow Zetra isolates and protects customer dataView ↗
- Data Processing AgreementOur DPA, part of every customer's TermsView ↗
- GDPR at ZetraRoles, transfers, retention and data subject requestsView ↗
- Privacy PolicyWhat we collect and whyView ↗
- Subprocessor listEvery third party that may process dataView ↗
- Data deletionHow to delete data, and what happens when you doView ↗
Controls
28 controls in place · updated October 29, 2026Subprocessors
| Subprocessor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbHCloud hosting | Cloud hosting | Helsinki, Finland (EU) |
| OpenAIAI services | AI services | United States |
| AnthropicAI services · optional | AI services | United States |
| Google (Generative AI)AI services · optional | AI services | United States |
| Google OAuthAuthentication · optional | Authentication | United States |
Updates
- Trust
Zetra Trust Center launched
Published October 29, 2026
One place for our security controls, compliance status, subprocessors and documents you can request.
- Privacy
Support tickets: Zetra Helpdesk only
Published October 28, 2026
Training an agent on support tickets now uses only tickets from the Zetra Helpdesk, with contact details removed first.