Companies / zoko.io
zoko.io tech stack
zoko.io declares 36 subprocessors, including AI providers Anthropic, OpenAI.
Declared subprocessors
Subprocessor list From the company's own list. Read the source.
| Subprocessor | Purpose |
|---|---|
| ActiveCampaign, LLC (Postmark) | Transactional email for billing and merchant communications. Merchant account data only. |
| Airbyte, Inc. | Data pipeline and transfer between internal systems |
| Amazon Web Services, Inc. | Image and file storage, and frontend deployment |
| Anthropic, PBC | Large language model API used to power AI Features, including AI agents and reply suggestions |
| Atlassian Pty Ltd (Jira, Trello) | Project, issue, and task tracking |
| Close, Inc. | Customer relationship management for merchant contacts, communication history, and sales pipeline |
| Cloudflare, Inc. | Content delivery network, DNS, DDoS protection, and traffic security |
| CookieYes Limited | Cookie consent management and storage of consent preferences for the Zoko website |
| Datadog, Inc. | Infrastructure monitoring and log aggregation |
| Elasticsearch B.V. | Search and indexing of platform data |
| Figma, Inc. | Design and collaboration on customer experience assets |
| Functional Software, Inc. (Sentry) | Error tracking and performance monitoring |
| GitHub, Inc. | Code repository, continuous integration, and AI coding assistance. No customer data is processed. |
| Google LLC (Google Cloud Platform) | Cloud storage and message queuing for webhooks |
| Grafana Labs | Monitoring, alerting, and observability |
| Hetzner Online GmbH | Cloud infrastructure and data hosting, including self-hosted database systems |
| LinkedIn Corporation | Social media platform and advertising used for marketing |
| Meta Platforms, Inc. | WhatsApp Business Platform and Meta messaging channels, used to process and deliver messages as part of the Services |
| Microsoft Corporation (Microsoft Clarity) | Session replay and behaviour analytics |
| Mintlify, Inc. | Hosting and authentication for Zoko product documentation |
| Mixpanel, Inc. | Product analytics, metadata only |
| MongoDB, Inc. | Document database for platform data |
| OpenAI, L.L.C. | Large language model API used to power AI Features, including AI agents and reply suggestions |
| PostHog Inc. | Product analytics, feature flags, and session recording, metadata only |
| Redis Ltd. | In-memory caching and queuing |
| Retool, Inc. | Internal administration tooling for merchant information, including email addresses and phone numbers |
| Shopify Inc. | Platform hosting, authentication, and app infrastructure |
| Slack Technologies, LLC | Internal messaging about customer projects |
| SmartBear Software, Inc. (BugSnag) | Error monitoring and crash reporting |
| Snowflake Inc. | Data warehousing for merchant and agent contacts, message metadata, and WhatsApp contact details |
| Sprinto, Inc. | Compliance automation and security control monitoring |
| Stripe, Inc. | Subscription billing and payment processing. Merchant account data only. |
| Twilio Inc. (Segment) | Customer data platform, collecting and routing product and website usage events |
| Webflow, Inc. | Hosting and content management for the Zoko marketing website |
| X Corp. | Social media platform used for marketing |
| Zapier, Inc. | Workflow automation connecting the platform with third-party applications at the customer's direction |
Seen on the website
Website This shows what the site runs, not what data it shares.
| Technology | Signal we saw |
|---|---|
| Cloudflare | header: cf-ray: a54726299edcc06e-DFW |
| Google Analytics | script: .src = 'https://www.googletagmanager.com/gtag/js?id=' + ID; document.head.appendChil |
| Google Tag Manager | script: ;j.src='https://www.googletagmanager.com/gtm.js?id=GTM-WSPWXBSP';f.parentNode.insertBef |
| Google Workspace | mx: aspmx.l.google.com. |
| Webflow | script: , "logo": "https://assets.website-files.com/62c7d8a855813a593f39ae0c/62c7d8a855813a |
Certifications
| Standard | Status | What this means |
|---|---|---|
| ISO 27001 | Company's own statement | Stated by the company. We have not checked an accreditation registry. |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. How we collect data.