Legal
Sub-processors
Third parties that may process personal data on behalf of Arizal to deliver the service.
Last updated 19 July 2026 support@arizal.app
International providersInfrastructure may process data outside your home country.
Purpose-limited accessProviders receive only the data needed for their operating role.
A living registerThis page is updated when material providers change.
1. About this list
We use carefully selected providers (“sub-processors”) to host and operate Arizal. Categories below reflect the current architecture. Exact vendor names and regions will be updated as infrastructure is finalized.
When we add or replace a material sub-processor, we will update this page. Enterprise customers with a DPA may receive additional notice as agreed in that contract.
2. Current sub-processors / processors
| Provider | Purpose | Data involved | Region |
|---|---|---|---|
| Application hosting | Runs the web application and API | Account and workspace data | Deployment region to be confirmed |
| MongoDB | Managed database hosting | Account data and user-created workspace content | Configured cluster region |
| Stripe, Inc. | Payments, subscriptions, invoices and fraud prevention | Name, email and billing information | Stripe infrastructure |
| Google LLC | Optional analytics and Google Calendar sync | Consented analytics or authorised calendar data | Google infrastructure |
| WHOOP | Optional wearable integration | Authorised sleep and recovery metrics | WHOOP infrastructure |
| Unsplash | Optional goal and vision image search | Search query and selected image URL | Unsplash infrastructure |
| Email provider | Transactional account and security messages | Email address and required message content | Provider to be confirmed |
3. Questions
Contact support@arizal.app with questions about sub-processors. Last updated: 19 July 2026.