TecZila Consultancy Services Inc.
Sub-processors
Every third party that touches data on our behalf, what they do, and where they are. Published rather than supplied on request.
- Effective
- September 12, 2026
- Last updated
- September 12, 2026
- Governing law
- Ontario, Canada
This policy has been drafted and published in good faith but has not yet been reviewed by legal counsel. It reflects how TecZila actually operates. If anything here matters to a decision you are making, ask us and we will confirm it in writing.
What this is
A sub-processor is a company we use to deliver our own service, which in the course of that may process data belonging to you or your customers. Hosting, email, DNS and newsletter delivery are all examples.
Most suppliers will give you this list if you ask. We publish it, because a list you have to request is a list that arrives after you have already signed.
Current sub-processors
| Provider | What it does | Where | What it touches |
|---|---|---|---|
| Microsoft | Email, productivity and identity (Microsoft 365) | Canada / USA | Business contact data, email content |
| Hostinger | Web hosting and website email | EU / USA | Website content, form submissions in transit |
| Cloudflare | DNS, CDN and bot protection (Turnstile) | Global edge network | IP address, request metadata |
| Business Profile management and Search Console, on client instruction | USA | Business listing data, aggregate search data | |
| Anthropic | AI assistance in drafting and analysis | USA | Only content we deliberately submit. Never client credentials or bulk personal data. |
Not every provider is involved in every engagement. Which ones apply to you depends on what you have asked us to do, and is confirmed in the engagement documentation.
Where our people are
Software is only half of it. The other half is who can see your systems, and from where.
- Canada — Primary delivery, client contact, administrative access
Client data is stored in the client's own or client-designated systems, in their jurisdiction. TecZila accesses those systems under delegated administrative access. Where a client designates data as restricted, access is limited to personnel located in that jurisdiction, and this is recorded in the engagement.
Clients may designate categories of data as in-jurisdiction only. Access is then restricted to personnel in that jurisdiction and recorded in the engagement documentation.
Everyone with access to client systems is bound by written confidentiality terms at least as strict as those we owe you, and access is removed when someone leaves or no longer needs it.
Changes and objections
Before adding a sub-processor that would handle client data, we give 30 days' notice to affected clients.
If a client has a reasonable objection, we will work to find an alternative. If we cannot, the client may terminate the affected part of the engagement without penalty.
AI tools
We use AI assistance in our own work — drafting, summarising and analysis. Clients increasingly ask about this, and some contracts prohibit it, so being specific matters:
- Client data is not submitted to AI tools without instruction
- We never submit credentials, or bulk personal data belonging to your customers
- Anything AI-assisted is reviewed by a person before it reaches you or is published in your name
- A client can opt out of AI assistance entirely, and we will say if that changes cost or timeline
How to reach us about this
Write to privacy@teczila.com, or call 1-833-TECZILA.
TecZila Consultancy Services Inc.Hamilton, ON
Canada