Subprocessors
The third parties Gazi Wellness uses to host, operate and support the platform, what each one does, and where it processes data.
How we use subprocessors
Gazi Wellness uses a small number of service providers to run the platform. Each is bound by a written data protection agreement and processes data only to provide its service to us. Customer audit photos, metadata and scores are stored and scored only in our AWS environment; Vision AI models run on our own AWS infrastructure and audit photos are not sent to third-party AI services.
We give at least 30 days' notice before adding a subprocessor that processes Customer Data. To receive notices, email privacy@gaziwellness.si with the subject "Subprocessor notices".
Infrastructure subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting, storage, databases, Vision AI model hosting, backups | All Customer Data | United States (us-east-1) or India (ap-south-1), as chosen by the Customer |
| Cloudflare, Inc. | Content delivery, DNS, web application firewall, DDoS protection | Network traffic, IP addresses; Customer Data passes through in encrypted form | Global edge network |
| Mapbox, Inc. | Map tiles and store location display in the web app | Store addresses and coordinates displayed on maps; no photos | United States |
Service subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Postmark (ActiveCampaign, LLC) | Transactional email: audit reports, CAP notifications, password resets | User names, email addresses, notification content | United States |
| Twilio Inc. | SMS notifications for CAP deadlines and escalations, when enabled | User names, phone numbers, notification content | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring | Error traces, user IDs, device information | United States |
| Zendesk, Inc. | Customer support tickets and help center | Names, emails, support conversations and attachments users choose to send | United States |
| Stripe, Inc. | Subscription billing and payment processing | Billing contact details, payment details (held by Stripe; Gazi Wellness does not store card numbers) | United States |
Business systems
The following providers process data about our customers' and prospects' business contacts, not audit data:
| Provider | Purpose | Location |
|---|---|---|
| HubSpot, Inc. | CRM, website forms and marketing email | United States |
| Google LLC (Google Workspace) | Internal email, documents and calendar | United States |