Introduction
Called 2 Work DBA Zia Code LLCengages the following sub-processors to provide services to our users. A “sub-processor” is a third party that processes personal data on our behalf in the course of operating the Called 2 Work service. Each sub-processor is bound by a written agreement that imposes data-protection obligations no less protective than the contract we owe to our users and business-owner customers.
Publishing this list satisfies our obligations under GDPR Art. 28 (general written authorization for sub-processors) and the CCPA / CPRA service-provider rules. It also forms Annex III of the Called 2 Work Data Processing Agreement by reference, so any change to this list automatically propagates into every executed DPA.
Active sub-processors
The following sub-processors are currently engaged and may receive personal data when you use the Called 2 Work service.
- StripeUSA
Payments processing and donor billing
Data categories: donor name, donor email, billing details
- ResendUSA
Transactional email delivery
Data categories: recipient email, email content, delivery metadata
- CloudflareGlobal
CDN, WAF, and DNS in front of the application
Data categories: request metadata, IP addresses, user-agent strings
- Cloudflare R2Global
Object storage for resumes and uploaded attachments
Data categories: resumes, uploaded attachments, file metadata
- Sentry / BugSinkEU/USA
Error telemetry and exception monitoring
Data categories: error stack traces, request metadata, user identifiers
- Oracle Cloud InfrastructureUSA
Compute and primary database hosting
Data categories: all application data at rest
- CoolifySelf-hosted (USA)
Self-hosted deployment orchestration. Touches environment variables and runtime logs; technically a sub-processor of the infrastructure layer.
Data categories: environment variables, runtime logs
Conditional sub-processors
The following entries are part of our operator-confirmed roster but are not currently active. Each is listed alongside the condition that must be satisfied before it begins processing personal data on our behalf — for example, a feature shipping or an individual member opting in. We list them here for full transparency so users can see the complete planned roster.
- Called 2 Work self-hosted LibreTranslate (translate.ziacode.dev)USAConditional
UI and user-generated-content translation
Data categories: translated UI strings, translated user-generated content
Activates when: Activates when self-hosted LibreTranslate ships per infra issue #408
- Planning CenterUSAConditional
Optional church-directory sync for opted-in members
Data categories: church directory profile, opted-in member contact info
Activates when: Only when church-directory-sync ships and a member opts in
How we notify you of changes
For business-owner customers who have executed a Called 2 Work Data Processing Agreement, we will give at least 30days' advance notice before authorizing a new sub-processor or making a material change to an existing one. The Customer may object to the change during that notice period on reasonable data-protection grounds per GDPR Art. 28(2); the change-notice mechanism is documented in Section 7 of the DPA.
For individual members and other end-users, we will update this page before any new sub-processor begins processing personal data and will summarize the change in the next privacy-policy update notice (sent by email when material changes occur). The current privacy policy describes the data we share with each category of sub-processor in more detail.
Questions about a sub-processor
If you have questions about how any sub-processor handles your personal data — or you would like to exercise a data-subject right that requires interacting with one of them — email [email protected] and we will respond.