Subprocessors

#1. Purpose

This list identifies relevant providers PROVEN may use to deliver the service. Exact use depends on the surface and feature used.

#2. Hetzner

Role: infrastructure and hosting. Relevant primary location: Germany / European Union. Data: application data and traffic needed to host the service.

#3. Cloudflare

Role: content delivery, traffic protection, network-edge security, and Cloudflare R2 object storage for image-optimization media artifacts.

Data: technical network information and HTTP requests needed to deliver/protect the site; for R2, original and optimized media files required for verification and restore.

Cloudflare operates global infrastructure; this policy does not claim an exclusive R2 object location unless a configuration that guarantees it is in place. Transfers are handled under the provider’s applicable contractual safeguards.

#4. Zoho Mail

Role: operational email and support notifications where used. Data: information necessary to transmit the relevant message or notification.

#5. OpenAI

Role: model and embedding services used by Zenia and features that request them. Data: prompts, relevant context fragments and technical data needed to produce a response. Use does not automatically extend OpenAI’s role to all data in the installed Shopify app.

#6. Shopify

Shopify is the platform on which the merchant operates the store and has its own relationship with the merchant. PROVEN interactions with Shopify APIs are also governed by Shopify platform terms.

#7. Changes

The list may be updated when relevant providers change. Material changes are published on this page.