Vendor record · zscaler.com
What Zscaler promises about your data.
Where Zscaler publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Zscaler lists its sub-processors at zscaler.com/legal/subprocessors. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at www.zscaler.com/legal/data-processing-agreement (read October 13, 2026) gives you 30 days to object.
- Window
- 30
- Sub-processors
- 9
- Pages
- 4
- Copies
- 30
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Zscaler DPA
Zscaler's data processing agreement gives 30 days to object to a new sub-processor. Here is the clause, from our October 13, 2026 copy:
30
days to object
“Customer may object to a new Sub-processor within thirty (30) days of such notice on reasonable grounds relating to data protection.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Zscaler published it.
www.zscaler.com/legal/data-processing-agreement · read 2026-10-13 · fingerprint d74cafa2f26cc57c…
Zscaler sub-processors
Zscaler publishes a sub-processor list at zscaler.com/legal/subprocessors; we last read it on October 15, 2026. It names 9 entries. The entries, as the list prints them: Functional Software, Inc.; Microsoft Corporation (Azure); Momentum Labs, Inc.; Movate; Salesforce, Inc.; Sendgrid; SendSafely, Inc.; Splunk, Inc.; theLoopsai, Inc.. The same list is in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
9 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Zscaler keeps your data
We hold no statement about data retention from Zscaler's watched pages. The pages we watch: data processing agreement www.zscaler.com/legal/data-processing-agreement; pricing page zscaler.com/pricing; privacy policy zscaler.com/privacy; sub-processor list zscaler.com/legal/subprocessors.
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 9
Functional Software, Inc.
d/b/a Sentry
Microsoft Corporation (Azure)
Momentum Labs, Inc.
Movate
dba SlashSupport)
Salesforce, Inc.
Sendgrid
)
SendSafely, Inc.
Splunk, Inc.
theLoopsai, Inc.
The pages' own stamps: Last updated 2026-10-05
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What Zscaler does not publish where we can read it
Of the 4 public pages we watch for Zscaler, these give us nothing right now.
Trust and security
the page at that URL is not that document
zscaler.com/securityBefore you conclude anything
This only means we couldn’t read it on a public page. Zscaler may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Zscaler. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Zscaler? With an email at zscaler.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Zscaler in your product? Hear the morning we read a change.
You get the lines that moved, in Zscaler’s own words, and the date any window closes. No card. Nothing to cancel.