Compliance and Security Overview
This Trust Center provides transparent visibility into Zernio's security, compliance, governance, and trust documentation, giving your procurement and security teams everything they need in one place.
SOC 2 Type 2
GDPR
Third parties that process data on our behalf under strict contractual safeguards.
Telnyx
Telephony features: phone-number provisioning, messaging, calls and verification or regulatory records where these services are used. For regulated phone numbers, Telnyx receives and holds the KYC identity and business documents and registration details submitted for carrier review; Zernio keeps only the carrier reference IDs. This is feature-dependent and should not be treated as part of every social-publishing-only workflow. Carrier and processing locations depend on the service and number jurisdiction.
Anthropic
AI-assisted customer support: support conversation content and tool-provided account or diagnostic context used in investigation. Automated pre-screening of regulated phone number registrations (KYC): the identity and business documents and registration details a customer submits for a regulated number are sent once for an automated review before the order reaches the carrier; Zernio does not store the document files as part of this step. Neither use requires customers to connect an AI assistant to the social publishing API. Applicable processing locations require provider-specific confirmation.
Axiom
Operational logging and monitoring: application and Cloudflare Worker logs and queue metrics. These datasets use the US East (Northern Virginia), United States deployment (verified September 8, 2026). Provider remote-access and any additional storage locations require separate confirmation.
Cloudflare
API infrastructure: CDN, network security, Workers, queues and R2 media storage. Both media.getlate.dev and media.zernio.com are active bindings of the R2 media bucket, verified September 8, 2026. Bucket reports Western Europe with default jurisdiction, which is not a country-specific or EU-only guarantee. Global edge processing and provider support are separate: https://www.cloudflare.com/gdpr/subprocessors/cloudflare-services/ .
Comp AI
Trust Center administration: access requests, requester identity, NDA signatures and compliance-document access records. This service supports customer security reviews; it is separate from the core social publishing and media-storage path.