Vendor profile
Zscaler: where is customer data stored and processed?
Zscaler stores and processes customer content in the EU and the USA, with Chinese hosting only for customers outside the EU/EEA, and the EU locations are not named by country. Customers can choose log location for some products, but the regions are not named. Support is provided from the USA, Bulgaria, India and Japan, the latter not confirmed, and several group companies in Brazil, Australia, Canada, Japan, Israel, Costa Rica, the UK and Spain also take part in operations. Identity, backup and telemetry locations are not stated, and AWS, Azure and Snowflake are said to be hosted globally without countries. Sendgrid, Sentry and Have I Been Pwned process notifications, monitoring and email checks in the USA and Australia. Zscaler Copilot runs on Google Cloud in the USA and the EU.
Checked 12 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Europe (country not stated) | –
Only for customers in other regions: USA, China |
|---|
| Processing | Europe (country not stated) | –
Only for customers in other regions: USA, China |
|---|
| Logs and telemetry | – | USA |
|---|
| Analytics and metadata | – | USA, Australia |
|---|
| Notifications and email | – | USA |
|---|
| Support | Bulgaria | USA, India, Japan
Only for customers in other regions: China |
|---|
| Group companies | Spain, Sweden, Austria, Germany, France, Netherlands, Poland, Croatia | USA, India, Brazil, Australia, Canada, Japan, Israel, Costa Rica, United Kingdom, Switzerland, Singapore |
|---|
| AI features | Europe (country not stated) | USA |
|---|
Only outside the EU/EEA, with no European alternative stated: Notifications and email, Logs and telemetry, Analytics and metadata.
Ownership and agreements
| Owner | Zscaler, Inc. (USA) |
|---|
| Headquarters | USA |
|---|
| Data processing agreement | Found and read |
|---|
| Certifications | ISO/IEC 27001, SOC 2 |
|---|
Sub-processors (20)
| Name | Country | Purpose |
|---|
| Amazon Web Services (AWS) | – | Hosting for certain features of ZPA, ZIA and many others |
| Microsoft Corporation (Azure) | – | Hosting for certain features of ZPA, ZIA, ZDX and others |
| Google Cloud Platform | USA og EU | Hosting for certain features of ZDX, CIEM, Breach Predictor and others |
| Snowflake | – | Hosting for certain features of ZPC, Asset Exposure Management and others |
| Databricks | USA | Hosting for certain features of DSPM |
| Alibaba Cloud | China | Hosting for certain features of Zscaler Products to support Customer Users in Ch |
| CentraComm Communications | USA | Augmenting support for GovCloud customers, including responding to tickets |
| Accenture Federal Services | USA | Providing support for certain GovCloud customers |
| Concentrix | Bulgaria og India | Augmenting support, including responding to tickets |
| Momentum Labs, Inc. | USA | Improving customer support services |
| Movate (formerly CSS Corp. dba SlashSupport) | India | Augmenting support, including responding to tickets |
| JTP CO | Japan | Augmenting support for Japanese-language customers |
| Salesforce, Inc. | USA | Customer support platform |
| SendSafely, Inc. | USA | Encrypted file exchange platform used for support |
| theLoopsai, Inc. | USA | Improving customer support services |
Sources