Effective date: November 7, 2025
Applies to: All Services operated by Metrix Zenith X Artificial Intelligence (“MZX AI”).
This page identifies third parties engaged by MZX AI to process personal data on behalf of customers (“Subprocessors”). Terms used but not defined here have the meanings in your agreement and DPA with MZX AI.
We engage LLM/API providers only where the provider publicly states that API inputs/outputs are not used to train or improve foundation models and we contractually prohibit training on Customer Content/Personal Data for our workloads. We do not enable provider settings that allow retention for training unless you explicitly opt in (per contract).
Regions. Processing regions reflect service configuration and availability. Unless agreed otherwise, primary processing occurs in the
United States. EU/UK transfer safeguards (e.g., SCCs + UK Addendum) apply where required.
| Vendor (legal entity) | Service category & purpose | Types of data processed | Processing location(s) | Transfer mechanism (if applicable) | Enabled by default? | Notes |
|---|---|---|---|---|---|---|
| Amazon Web Services, Inc. (AWS) | Hosting & infrastructure (compute, storage, encryption/KMS); networking; logging | Customer Content (files you upload and generated outputs), account & ops metadata, telemetry/logs | USA (primary). Other regions may be available by agreement | SCCs/UK Addendum, as needed | Yes | S3, EC2/Lambda, KMS, CloudWatch, etc. |
| Amazon Simple Email Service (SES) | Transactional email delivery (notifications, confirmations) | Sender/recipient names & emails; message headers; message body (transactional) | USA (primary) | SCCs/UK Addendum, as needed | Yes | Used for outbound transactional email only. |
| Microsoft Corporation (Exchange Online / SMTP relay) | Transactional email delivery (fallback/relay) | Sender/recipient names & emails; message headers; message body (transactional) | USA/EU (per Microsoft routing) | SCCs/UK Addendum, as needed | No (fallback) | Used only as configured for redundancy or routing constraints. |
| Stripe, Inc. | Payments (subscription/usage billing) | Billing contact details; transaction metadata; tokenized payment info (no full card stored by MZX AI) | USA/EU (per Stripe) | SCCs/UK Addendum, as needed | No (only if your plan includes payments) | Customer’s billing contacts only. |
| Zoho Corporation Pvt. Ltd. | Support/CRM (ticketing, support emails/attachments) | Support requester contact data; ticket content; attachments provided by you | USA/EU/IN (per Zoho service/tenant) | SCCs/UK Addendum, as needed | No (enterprise support) | Do not include special categories in tickets unless instructed and safeguarded. |
| OpenAI, L.L.C. | Optional model API (inference only; no training on API I/O) | Prompt/response text you submit for inference (if enabled); minimal metadata | USA/EU (per provider offering) | SCCs/UK Addendum, as needed | No (opt-in) | Subject to no-training commitment and customer enablement. |
| Google Cloud (Vertex AI) – Google LLC | Optional model API (inference only; no training on API I/O) | Prompt/response text (if enabled); minimal metadata | USA/EU (per provider offering) | SCCs/UK Addendum, as needed | No (opt-in) | Subject to no-training commitment and customer enablement. |
| Anthropic PBC | Optional model API (inference only; no training on API I/O) | Prompt/response text (if enabled); minimal metadata | USA/EU (per provider offering) | SCCs/UK Addendum, as needed | No (opt-in) | Subject to no-training commitment and customer enablement. |
| Perplexity AI, Inc. | Optional model API (inference only; no training on API I/O) | Prompt/response text (if enabled); minimal metadata | USA/EU (per provider offering) | SCCs/UK Addendum, as needed | No (opt-in) | Subject to no-training commitment and customer enablement. |
| Mistral AI | Optional model API (inference only; no training on API I/O) | Prompt/response text (if enabled); minimal metadata | EU (primarily), other as offered | SCCs (when applicable) | No (opt-in) | Subject to no-training commitment and customer enablement. |
Data minimization. For optional model APIs, we send only the text necessary for the specific inference task and disable persistent retention where feasible.
Subscribe for updates or questions: privacy@mzx.ai
Some customers may contract for private/VPC deployments. In such cases, Subprocessors and data flows may differ (e.g., Customer’s own cloud account, no shared email provider). The applicable Subprocessor set and regions will be defined in your order form/SOW.
Reminder: This page is for transparency and works together with your Agreement and DPA with MZX AI. If there is any inconsistency, the DPA governs processing of personal data.
