Legal
Data processing summary
Processor/controller roles, subprocessors, and security measures for hosted Cloud.
Last updated: 9 August 2026 (v2026.08.09). These pages summarize current product behavior; they are not a substitute for a negotiated enterprise contract. Electronic acceptance records capture the exact version shown at checkout.
Roles
For Zenith Cloud hosted inference and account administration, Zenith acts as a processor of customer account, billing, and usage metadata, and as a controller of its own operational logs. For self-hosted Gateway deployments, you are the controller of prompts, responses, and local configuration; Zenith processes only the limited activation, policy, and license metadata required to support the product.
Processing purposes
Provide authentication, billing, wallet grants, API authorization, support, security monitoring, contract acceptance evidence, and Enterprise license fulfillment. We do not sell personal data.
Subprocessors
Payment checkout runs on Tapsilat. Infrastructure hosting, SMTP delivery (when configured), and any additional subprocessors listed in your enterprise order form apply. Ask your commercial contact for the current subprocessor list before production onboarding.
Security measures
Passwords are hashed. Payment identity and provider secrets are encrypted with the issuer master key. Admin and customer sessions use signed cookies. Metrics and audits are designed to avoid prompt/response bodies and secret material.
International transfers
Data residency follows the regions where you and Zenith deploy the Cloud stack. Cross-border transfers, if any, should be covered by your contract’s transfer mechanism (for example SCCs) rather than this summary page alone.
Assistance
We will assist with reasonable data subject requests that concern Cloud-hosted personal data we control or process, subject to verification and legal limits. Signed-in customers can download a JSON account export and soft-delete their Cloud account from Account settings. Enterprise customers may also request assistance through support when additional verification or backup-window handling is required.