Subprocessors - Policies

A Ohrus Labs - Service, Lda ("Ohrus") relies on third parties ("Subprocessors") to support the provision of the services of the Ziett platform. These entities process personal data solely under instruction from Ohrus and strictly within the scope necessary for the indicated purpose.

Ohrus enters into written agreements with all Subprocessors establishing obligations equivalent to those provided for under Applicable Data Protection Laws, including the prohibition of sharing data with unauthorized third parties and the obligation to destroy or return data at the end of the contractual relationship.

This page is kept up to date. Customers with an active Data Processing Addendum (DPA) will be notified 30 days in advance in the event of any addition of new Subprocessors.

Infrastructure and Platform

Subprocessor	Legal Entity	Purpose	Entity Country
Google Cloud	Google LLC	Hosting infrastructure, computing, and data storage for the Platform	United States of America

Message Delivery

Subprocessor	Legal Entity	Purpose	Processed Data	Entity Country
Unitel	Unitel SA	Sending SMS messages to recipients on the Unitel network in Angola	Phone number, message content, delivery metadata	Angola
Africell	Africell SA	Sending SMS messages to recipients on the Africell network in Angola	Phone number, message content, delivery metadata	Angola

Billing and Financial Management

Subprocessor	Legal Entity	Purpose	Processed Data	Entity Country
Vendus	Centauro — Sistemas de Informação, Lda.	Invoice issuance and tax processing in compliance with AGT rules	Legal name, NIF, Address, purchase history	Portugal

Analytics and Monitoring Tools

Subprocessor	Legal Entity	Purpose	Processed Data	Entity Country
Google Analytics	Google LLC	Behavior and usage analysis of the website and the application	Usage data with anonymized IP, navigation events	United States of America
Metabase	Metabase, Inc.	Business Intelligence and internal analysis of operational data	Aggregated usage data	United States of America

Note on International Transfers

Some Subprocessors are headquartered in the United States of America. For processing involving data of subjects in the European Union, EEA, or United Kingdom, Ohrus ensures that these transfers are carried out based on adequate legal mechanisms, namely Standard Contractual Clauses (SCC) approved by the European Commission. For transfers of data from subjects in Brazil, the guarantees provided for in the LGPD are applied.

For more information on transfer mechanisms, please consult the DPA or contact privacy@ziett.co.

Change History

Date	Change
05 Jun 2026	Version 1.0 — initial publication of the subprocessors list

Contact

For questions about subprocessors or data processing:

Email: privacy@ziett.co
Website: ziett.co
Legal Entity: Ohrus Labs - Service, Lda — NIF: 5002714485