This disclosure explains how Software Programming Group LLC may use third parties to Process Customer Personal Data for GenZOS. It supplements the Privacy Policy and Data Processing Addendum.
What Is a Subprocessor
A Subprocessor is a third party engaged by Provider to Process Customer Personal Data on Customer's behalf. A Customer-selected independent integration may instead act under its own terms and instructions and may not be Provider's Subprocessor for all activity.
Service Categories
Provider may use third parties for:
cloud hosting, storage, compute, networking, content delivery, backups, and managed databases;
identity, authentication, security, monitoring, logging, error reporting, and incident response;
AI model inference, model hosting, routing, evaluation, and safety services;
repository synchronization, source-code management, and developer integrations;
email, support, communications, demonstrations, and customer success;
billing, payment processing, tax, fraud prevention, and accounting; and
analytics and website operations, subject to cookie and consent controls.
Product-Visible Model and Integration Families
The GenZOS feature inventory identifies potential access to OpenAI models, Anthropic Claude models, DeepSeek models, Qwen models, GLM models, Kimi models, GitHub, and Bitbucket. A listed family or integration is not necessarily active for every Customer, does not establish the exact contracting entity, and does not mean Customer Content is routed to that provider in every deployment.
The actual processor for an AI model may be the model developer, a cloud platform, a managed model marketplace, a private deployment, or another authorized hosting provider. The exact legal entity, processing location, transfer mechanism, and retention setting must be disclosed based on the production route and Customer configuration.
Customer-Managed Deployments
For a customer-managed deployment, Customer may select and contract directly with infrastructure, model, repository, database, monitoring, or support providers. Those parties may be Customer's processors rather than Provider's Subprocessors. The Order Form and deployment documentation should identify responsibility for each component.
Notice and Objection
Where the Data Processing Addendum applies, Provider will provide notice before a new Subprocessor materially Processes Customer Personal Data. Customer may object on reasonable data-protection grounds within the stated notice period. The parties will work in good faith on a commercially reasonable alternative. If none is available, the affected feature or Service may be terminated as described in the DPA.
Required Production Schedule
Before publication, Provider should maintain a live schedule for every production Subprocessor with:
full legal entity name and service name;
purpose and feature supported;
categories of Customer Personal Data;
processing and hosting countries or regions;
transfer mechanism, where applicable;
whether use is standard, optional, Customer-selected, or deployment-specific; and
a link to the vendor's current privacy or security information.
This document intentionally does not represent an available model family as a confirmed Subprocessor until the actual production contract and routing are verified.
Contact
Questions or objections may be sent to privacy@genzos.ai with the subject "GenZos.ai Subprocessor Inquiry."
Provider: Software Programming Group LLC
Postal address: 5 Independence Way, Suite 300, Princeton, New Jersey 08540, United States