Blitzz is a data processor and uses sub-processors to assist in providing its services. A sub-processor is a third-party data processor engaged by Blitzz who may receive and process personal data submitted through Blitzz’s services by a controller.
Authorized sub-processors are listed below along with a description of the services they provide and the location where data is hosted.
Blitzz uses the sub-processors listed below to assist in providing services as described in our Terms of Service or a similar services agreement customers may have signed with us.
Governance
Blitzz partners with organizations that, like itself, adhere to global standards and regulations. In addition to evaluating technical requirements, Blitzz examines data protection measures, compliance with our security requirements, and security audit reports before closing any contract. Initial agreements include review and approval of breach notification provisions in the event of unwarranted data incidents, as well as necessary security measures for data protection.
Blitzz commits to keeping this list updated regularly so that Controllers can stay informed of the scope of sub-processing associated with Blitzz services.
Infrastructure Architecture
Blitzz uses a tiered cloud infrastructure model designed for reliability, performance, and security:
- Primary infrastructure (Microsoft Azure): All core Blitzz SaaS applications are hosted on Azure. The majority of customer data is stored, processed, and transmitted through Azure data centers.
- Supporting services (Twilio, SendGrid): Real-time communication capabilities such as WebRTC video, SMS, WhatsApp messaging, and transactional email delivery are provided through Twilio and SendGrid.
- Optional / limited use (AWS, Google Cloud Platform): AWS and GCP are used on a limited basis for select supporting services such as analytics and compute. These providers do not host core Blitzz application data unless specifically agreed upon with the Controller.
Blitzz holds control of and access to data hosted on all infrastructure services. Data resides in corresponding data center facilities based on the location or plan selected by the Controller (Blitzz customer) and remains in the selected data center unless shifted to ensure performance and availability of services, or as specifically agreed between the Controller and Blitzz.
Authorized Sub-processors
Note: Not all sub-processors listed below may apply to your account. The specific sub-processors involved depend on the Blitzz features and services enabled for your organization.
Primary Infrastructure
| VENDOR | PURPOSE | DATA CENTERS | LINK (External links for additional information relating to security) |
| Microsoft Corporation | Primary cloud infrastructure provider (Azure). Hosts all Blitzz SaaS applications and stores the majority of data processed and transmitted through Blitzz services. | United States | Privacy Program |
Supporting Services
| VENDOR | PURPOSE | DATA CENTERS | LINK |
| Twilio** | Real-time communication provider. Powers WebRTC video, SMS, and WhatsApp messaging within the Blitzz application. | United States | Data Privacy; Data Security |
| Twilio SendGrid | Transactional email delivery. Handles programmatically triggered emails such as notifications and alerts sent from Blitzz applications. | United States | Security Policy |
| Sinch | SMS delivery for Canadian phone numbers. | — | Privacy Policy |
| Daily.co | Video calling infrastructure for select use cases, including Blitzz Cobrowse sessions. | United States | Privacy Policy |
Optional / Limited Use Infrastructure
| VENDOR | PURPOSE | DATA CENTERS | LINK |
| Amazon Web Services, Inc. | Used on a limited basis for select supporting services such as analytics and compute. Does not host core Blitzz application data. | United States | Compliance Program; GDPR Centre; Supplementary Measures Addendum; Blog |
| Google Cloud Platform | Used on a limited basis for select data storage and processing services. Does not host core Blitzz application data. | United States | Data Privacy; Trust & Security; Blog |
AI Services
| VENDOR | PURPOSE | DATA CENTERS | LINK |
| OpenAI | AI model provider powering intelligent features such as AI Knowledge Base, agent assistance, and automated troubleshooting within Blitzz products. | United States | Privacy Policy |
| Anthropic | AI model provider powering intelligent features such as AI Knowledge Base, agent assistance, and automated troubleshooting within Blitzz products. | United States | Privacy Policy |
Business Operations & Tools
| VENDOR | PURPOSE | DATA CENTERS | LINK |
| Firebase Analytics | Mobile and web application crash reporting and diagnostics. | United States | Privacy and Security |
| Stripe | Payment processing for credit card and subscription transactions. | United States | Service Agreement |
| Zoho | Billing and subscription management, including invoices and renewal reminders. | United States | Privacy Policy |
| Mailchimp (Intuit) | Email marketing and campaign management for customer communications. | United States | Privacy Policy |
| Freshworks | Internal customer relationship management and support ticket tracking. | United States | Terms of Service |
| HubSpot | Customer relationship management, marketing automation, and sales engagement. | United States | Privacy Policy |
| Slack (Salesforce) | Internal team communication and collaboration. | United States | Security Practices |
| Google Workspace | Internal email, cloud storage, and productivity tools for Blitzz operations. | United States | Privacy Policy |
**Call recording is processed by Twilio and can be stored in your region of choice.
For questions or objections regarding sub-processors, please write to support@blitzz.co.