Summary of policy updates
-
Zanda Terms of Use
- New: 4. Data Location and Residency
- New: 9. Provision of Technical Support and Data Migration Services
- Clarified: 13. Third-Party Services and Integrations
- Clarified: 22. Governing Law _
_
-
Zanda Privacy Policy
- Clarity and wording improvements
- Updated Vendor List
-
Zanda Global Data Processing Agreement (DPA)
- New: 1.3 Data Location and Residency
- New: 2.2 Additional Instructions
- Update: Governing Law is now covered under the Terms of Use (the DPA and Terms work together as linked documents).
Importantly, nothing changes about how you use Zanda or your existing rights and no action is required from you. This notice is simply to keep you informed.
FAQ’s
1 ) Do I need to do anything?
No. These are housekeeping updates to improve clarity and better reflect how Zanda already operates. No action is required.
2) Are you changing how Zanda processes my data?
No. There’s no change to how you use Zanda or your existing rights. The updates mainly clarify responsibilities, support/migration workflows, integrations, and where governing-law terms sit.
3) What documents were updated?
We updated:
- Zanda Terms of Use
- Zanda Privacy Policy
- Global Data Processing Agreement (DPA) (linked from the Terms of Use)
- Our Vendor List (previously Zanda Processors, linked from the Privacy Policy)
4) Why are there changes in both the DPA and the Terms of Use?
Because these documents serve different purposes but work together:
- The DPA covers data processing terms (how we process Customer Data on your instructions).
- The Terms of Use cover the general service terms (including governing law and service provisions).
5) What does “Data Location and Residency” mean?
It explains where service data may be hosted or processed (for example, the regions where our infrastructure operates), and how data is handled in practice. This is primarily a transparency and clarity improvement.
6) Are you moving my data to a new region?
No. These updates do not change your current setup by themselves. If any region change or migration is ever needed for your account, it would be handled through the normal support and migration process.
7) What does the new “Additional Instructions” section in the DPA mean?
It clarifies how customers (as controllers) can provide documented instructions to Zanda (as processor) for specific processing activities—consistent with how the DPA already works in practice.
8) What’s included in the new Terms section about “Technical Support and Data Migration Services”?
It outlines:
- how support is provided,
- what a data migration or data export may involve,
- and how we handle those requests securely as part of the service.
9) Do these changes affect third-party integrations?
No change in how integrations work day-to-day. The Terms update clarifies how third-party services/integrations are treated (for example, that they’re provided via third parties and may have their own terms/policies depending on what you choose to connect).
10) Did you add new sub-processors?
The sub-processor list was updated to reflect the current set of vendors used to support the service. You can always review the latest list via the link in the email.
11) What if I don’t agree with the updates?
The updates take effect on 7th March 2026. If you continue to use Zanda on or after this date, you’ll be deemed to have accepted the updated documents.
If you have concerns, reply to the email or contact [email protected] so we can help.
12) Will this impact pricing, features, or my contract terms with Zanda?
No. This notification is not a pricing or product change announcement. It’s focused on clarity and alignment of the documents.
13) Where can I read the updated documents?
You can review them anytime on our website:
- Zanda Privacy Policy
- Zanda Terms of Use
- Global Data Processing Agreement (DPA)
- Zanda Vendor List (previously Zanda Processors)
14) Who can I contact if I have questions?
Just reply to the notification email or contact [email protected].
Extracted PDF: d02adfc275d5966a.pdf
Zanda Global Data Processing Agreement (“DPA”) This Global Data Processing Agreement (“DPA”) is an agreement between you and the entity you represent (collectively referred to as “Customer,” “you,” or “your”) and Zanda Health Pty Ltd (“Zanda”, “we”, “us”, or “our”). This DPA supplements the Zanda Platform Terms of Use (“Terms of Use”) and governs the Processing of Personal Data by Zanda on behalf of the Customer in connection with the Customer’s use of the Services. The following appendices are attached and are an integral part of this DPA. Each appendix applies as required by the Customer’s local regulations: ● APPENDIX I – EU STANDARD CONTRACTUAL CLAUSES: CONTROLLER TO PROCESSOR: Governs the transfer of Personal Data from the EU to Zanda as a data processor in compliance with EU data protection laws. ● APPENDIX II – UK INTERNATIONAL DATA TRANSFER ADDENDUM TO THE EU COMMISSION STANDARD CONTRACTUAL CLAUSES: Provides additional safeguards and terms for data transfers from the UK to Zanda in compliance with UK data protection laws. ● APPENDIX III – US HIPAA BUSINESS ASSOCIATE AGREEMENT: Outlines Zanda’s obligations as a Business Associate when handling Protected Health Information (PHI) under the US Health Insurance Portability and Accountability Act (HIPAA). By accessing or using the Services you acknowledge that you have read, understood, and agree to be bound by this DPA. This DPA becomes effective upon your subscription to the Services and remains in effect for the duration of your subscription. All capitalised terms used in this DPA will have the meanings given to them in Section 14 of this DPA.
Docusign Envelope ID: C257CC82-01E9-4DA0-A39D-6D53E07FCEF2
1. Details of Data Processing 1.1. Scope and Roles This DPA applies to Processing Customer Data to provide the Services. Zanda acts as the Data Processor on behalf of the Customer, the Data Controller. 1.2. Data Processing Activities 1.2.1. Subject Matter: The…