Legal · Effective 16 April 2026
Sub-processors
The third-party sub-processors PT Mars Bumi Indonesia (Zentara) uses to deliver our cybersecurity and AI services, categorized by function. All are bound by written Data Processing Agreements that meet or exceed GDPR Article 28.
To provide our cybersecurity and AI services, PT Mars Bumi Indonesia (“Zentara”) utilizes various third-party sub-processors. We are committed to transparency and the protection of personal data. Below is the current list of sub-processors used by Zentara, categorized by their function within our infrastructure.
All sub-processors listed below are bound by written Data Processing Agreements (DPAs) that meet or exceed the requirements of GDPR Article 28 and the Zentara Data Protection Framework.
Sub-processor Categories
| Category | Sub-processor Name | Purpose & Location |
|---|---|---|
| Cloud Infrastructure & Hosting | AWS (Amazon Web Services), Alibaba Cloud, Cloudflare, Docker Hub, Webflow, Hostinger | Provision of cloud computing, content delivery (CDN), and secure web hosting. (US / Global) |
| Security & Compliance | PushSecurity, Drata, SafeBase, KnowBe4, AdOpt | Continuous security monitoring, compliance automation, consent management, and cookie preference tracking. (US / Global / Brazil) |
| Productivity & Collaboration | Slack, Google Workspace, Notion, Zoom, Gamma, Lumin | Internal/external communication, project wikis, document collaboration, and conferencing. (US / Global) |
| AI & Advanced Analytics | OpenAI, Use AI, Grok, NotebookLM, New Relic | Processing AI security analytics, large language model support, and system performance monitoring. (US / Global) |
| Sales & Marketing | HubSpot, Zapier, Make, SerpApi, LinkedIn, Canva, Figma | Client relationship management, workflow automation, and design assets. (US / Global) |
| Development & DevOps | GitHub, GitLab, Postman, Kaggle, Docker | Version control, API lifecycle management, and collaborative development tools. (US / Global) |
Notification of Changes
Zentara maintains a general written authorization for the use of the sub-processors listed above. As required by our Data Processing Agreement (DPA), we will notify our clients of any intended changes concerning the addition or replacement of sub-processors at least 30 days in advance. This notification provides our clients with the opportunity to object to such changes based on reasonable data protection grounds. Notifications are typically sent via email to the primary administrative or compliance contact associated with your Zentara account.
International Data Transfers
Where data is transferred outside of Indonesia, Singapore, or the EEA to these sub-processors, Zentara ensures that appropriate safeguards are in place, primarily through the execution of Standard Contractual Clauses (SCCs) and rigorous vendor security assessments.
Contact Us
If you have questions regarding this list or wish to receive a copy of our standard Data Processing Agreement, please contact our Data Protection Officer at [email protected]. Website: https://zentara.co/privacy-policy/.
FRM-PIMS-30 · Zentara Sub-processor Infrastructure List · Rev. 1
PT Mars Bumi Indonesia · Registered PSE No. 020644.01/DJAI.PSE/11/2025
More legal & compliance