AI vendors and your data

146 vendors · 427 answers

Is there a public subprocessor list?

Whether the vendor publishes the third parties that process customer data. 48 of 146 vendors answer it on the pages watched here, quoted below.

Depends
Amplitude
Listed in DPA Schedule B(Depends)
“A list of our sub processors is disclosed in Schedule B of your applicable DPA...”

Trust, Security and Privacy On the page Sep 25, 2026

Protective
Atlassian
Published list(Protective)
“to process Customer Personal Data on behalf of Atlassian customers and developers in accordance with agreements between Atlassian and the Sub-processor...”

List of Data Subprocessors On the page Nov 9, 2026

Protective
Blacksmith
Published list(Protective)
“This page lists the sub-processors that Blacksmith engages to process Customer Personal Data on behalf of Customers...”

Sub-processors On the page Sep 25, 2026

Protective
ClickHouse
Published list(Protective)
“ClickHouse and its Affiliates may engage the following entities to process Customer Personal Data...”

ClickHouse Cloud Sub-Processors and Affiliates On the page Sep 25, 2026

Protective
Cloudera
Published list(Protective)
“To receive updates regarding sub-processors, please join the Cloudera Community and sign up for notifications...”

Cloudera Customer Subprocessors On the page Sep 25, 2026

Protective
Cloudflare
Published list(Protective)
“Cloudflare uses the following third-party entities as sub-processors for the activities listed below...”

Cloudflare Sub-Processors On the page Sep 25, 2026

Protective
Cognition
Published list (DPA Appendix C)(Protective)
“A list of Licensor’s current Subprocessors is set forth in Appendix C to this DPA.”

Data Processing Agreement On the page Sep 25, 2026

Protective
CoreWeave
Published list(Protective)
“Customer consents to the use of CoreWeave’s current Sub-processors as listed on CoreWeave’s page...”

CoreWeave Data Processing Agreement On the page Sep 25, 2026

Protective
Cursor
Published on trust portal(Protective)
“Our list of subprocessors is published on our trust portal .”

Security On the page Sep 24, 2026

Protective
Databricks
Published list(Protective)
“Databricks engages certain subprocessors in connection with providing the Platform Services or Support Services...”

Databricks Subprocessors On the page Sep 25, 2026

Protective
Datadog
Published list(Protective)
“Datadog may engage third parties or other members of the Datadog corporate group (affiliates) to carry out data-processing activities that involve access to customer data...”

Subprocessors List On the page Sep 25, 2026

Protective
DigitalOcean
Listed in DPA Schedule 3(Protective)
“Customer agrees that DigitalOcean may use the Subprocessors listed at Schedule 3...”

Data Processing Agreement On the page Nov 9, 2026

Protective
Dynatrace
Published list(Protective)
“This page provides information about the identities, roles and locations of Dynatrace Sub-processors and affiliates...”

Authorized Sub-processors for Dynatrace Services On the page Sep 25, 2026

Protective
Elastic
Published list(Protective)
“Elastic uses certain infrastructure and customer support sub-processors to provide services to our customers...”

Elastic Global Privacy Portal On the page Sep 25, 2026

Protective
ElevenLabs
Published list(Protective)
“A list of ElevenLabs’ Subprocessors is maintained at https://compliance.elevenlabs.io...”

Data Processing Addendum On the page Nov 2, 2026

Protective
Fastly
Published list(Protective)
“Fastly engages certain sub-processors in connection with the provision of the Fastly Services...”

Sub-processors On the page Sep 25, 2026

Protective
Figma
Published list incl. AI(Protective)
“This page lists the sub-processors that Figma engages to process Customer Content...”

Figma Sub-processors On the page Sep 25, 2026

Protective
Fivetran
Published list incl. AI(Protective)
“We maintain a list of sub-processors and provide notice for any additions...”

Fivetran Privacy Policy On the page Nov 9, 2026

Protective
Fly.io
Published list(Protective)
“Fly.io uses the following sub-processors to assist in providing our services...”

Fly.io Sub-processors On the page Nov 2, 2026

Protective
GitLab
Published list(Protective)
“When acting as a processor for Customer, Gitlab may engage the following entities to carry out specific processing activities...”

Sub-processors of GitLab On the page Nov 2, 2026

Protective
Google
Published list(Protective)
“Google and its affiliates engage the third-party entities in the table below to perform limited activities in connection with the Google Cloud Platform Services.”

Google Cloud Platform Subprocessors On the page Sep 24, 2026

Protective
Hugging Face
Published list(Protective)
“We may share your information with Third-Party Service Providers, and when we do, we ensure that they access your information in compliance with applicable data protection laws.”

Privacy Policy On the page Sep 25, 2026

Protective
Intercom
Published list(Protective)
“The following entities are Intercom Affiliates which may function as sub-processors in providing the services and/or for support...”

Subprocessors List On the page Sep 25, 2026

Protective
Jasper
Published list(Protective)
“Jasper provides notice of new sub-processors via this advisory, with updates to the list of sub-processors that are utilized.”

Sub-Processors On the page Nov 2, 2026

Protective
JetBrains
Published AI provider list(Protective)
“JetBrains AI services are powered by a combination of AI models hosted directly on JetBrains servers and AI models provided by external AI services providers...”

JetBrains AI Service Providers On the page Oct 5, 2026

Protective
JFrog
Published list(Protective)
“JFrog engages third-party service providers to process personal data on behalf of our customers...”

Sub-Processors List On the page Sep 25, 2026

Protective
Lyzr
Published list(Protective)
“Third parties that process customer data on our behalf.”

Lyzr Inc. Trust Center On the page Sep 25, 2026

Protective
Modal
Published list(Protective)
“Subcontractors that process Customer Data to provide AI Tools are identified on Modal's Subprocessor list, as further described in the Data Processing Addendum.”

Terms of Service On the page Oct 19, 2026

Protective
Nebius
Published list(Protective)
“This page identifies the sub-processors engaged by Nebius to process Customer Personal Data on behalf of Customers in connection with Nebius Token Factory under the applicable Data Processing Agreement.”

Nebius Token Factory Sub-processors On the page Sep 25, 2026

ProtectiveClause gone
Notion
Published list(Protective)
“Any third parties that process Customer Data will be published in our Subprocessor Page...”

Notion AI security & privacy practices No longer on the page; being re-read

Protective
OpenAI
Published list(Protective)
“OpenAI engages the following entities to provide processing activities for Customer Data (as defined in the OpenAI Data Processing Agreement).”

Sub-processor list On the page Oct 26, 2026

Depends
Oracle
List via My Oracle Support(Depends)
“Oracle maintains lists of Oracle affiliates and subprocessors that may process Services Personal Information...”

Services Privacy Policy On the page Sep 25, 2026

Depends
Orchestra
Named in privacy policy(Depends)
“Service providers acting as sub-processors based in the UK who provide IT and system administration services...”

Privacy On the page Sep 26, 2026

Protective
PagerDuty
Published list(Protective)
“Subprocessors that may be used in the PagerDuty Services...”

PagerDuty Subprocessors On the page Sep 25, 2026

Protective
Patronus AI
Named in policy: AWS, Amplitude(Protective)
“We do not share your data with any external vendors other than two that are critical to our business operations and adhere to the highest security protocols - AWS, to manage our infrastructure, and Amplitude, for usage analytics reports.”

Privacy Policy On the page Oct 12, 2026

Protective
Pinecone
Published list(Protective)
“including all Pinecone Affiliates and the third-party Subprocessors identified at https://www.pinecone.io/legal/subprocessors/...”

Data Processing Addendum On the page Sep 25, 2026

Protective
PlanetScale
Published list(Protective)
“PlanetScale may engage third-party service providers to assist in providing our Services...”

PlanetScale Subprocessors On the page Sep 25, 2026

Protective
Runway
Published list(Protective)
“For transparency, we maintain a current list of subprocessors that handle enterprise customer data.”

Data Security and Privacy On the page Sep 25, 2026

Depends
SambaNova
List on written request(Depends)
“SambaNova will maintain a list of relevant subprocessors, a list of which will be provided upon Customer's written request.”

SambaStack Hosted Terms of Service On the page Sep 25, 2026

Depends
Samsara
Named in documentation(Depends)
“Customer authorizes each Samsara affiliates, as well as such other third parties noted in Documentation, to be sub-processors...”

Data Protection Addendum On the page Oct 19, 2026

ProtectiveClause gone
Sazabi
Published list in DPA(Protective)
“The following Sub-processors are currently authorized to Process Company Personal Data on Sazabi's behalf...”

Data Processing Addendum No longer on the page; being re-read

Protective
Scale AI
Published list(Protective)
“In order to provide our services, Scale may engage third party subprocessors or Scale affiliates to carry out our data processing activities.”

Scale Subprocessors On the page Sep 25, 2026

Protective
Sourcegraph
Published list(Protective)
“Sourcegraph engages Subprocessors to perform the functions described in the table below.”

Subprocessors On the page Sep 25, 2026

Protective
UiPath
Published list(Protective)
“The list below is a list of the sub-processors used in connection with UiPath’s cloud products and will be updated from time to time.”

Privacy & Personal Data On the page Oct 5, 2026

Protective
Vercel
Published list(Protective)
“We have updated our subprocessor list, as it pertains to services utilized for our AI products...”

Vercel Trust Center On the page Nov 9, 2026

ProtectiveClause gone
Verda
Published list on Trust Center(Protective)
“To maintain full transparency, all of our sub-processors, where they store data, and the specific purposes for which data may be transferred to them are listed on our Trust Center page.”

Privacy Policy No longer on the page; being re-read

Protective
Writer
Published list(Protective)
“Writer and its affiliates engage third-party subprocessors to help us provide services to our customers.”

Writer subprocessors On the page Sep 25, 2026

Protective
Zoom
Published list(Protective)
“A subprocessor is a vendor Zoom uses to process data on behalf of our customers, who are the data controllers of that data...”

Zoom Third-Party Subprocessors On the page Oct 12, 2026

Not stated on the watched pages: Ai2, Airbyte, Alibaba Cloud, Alteryx, Anthropic, Anyscale, Arcee AI, Astral, Atira, AWS, Baseten, Baz, Box, Braze, Cerebras, Character.AI, CodeRabbit, Cohere, Convex, CoVetAI, DataAgent, DataBahn, DataStax, dbt Labs, DeepSeek, Dropbox, DuckDB, Euno, Fin, Fireworks AI, Fish Audio, GitHub, Gradium, Grafana Labs, Grammarly, Groq, Groundcover, HashiCorp, Hypercubic, Inflection AI, Instinct, Jina AI, John Snow Labs, Keenable, Lambda, Lovable, Meta, Meticulous, Microsoft, Midjourney, Mistral AI, MongoDB, Moonshot AI, MotherDuck, MoveWorks, Naïve, Ollama, OpenRouter, Oxylabs, Palantir, Perplexity, Poe (Quora), Qlik, Raindrop, Reka, Replicate, Replit, Rillet, Ringg, Runable, Runpod, RWX, Sail Research, Salesforce, SAS, Scaled Cognition, sci2sci, Searchable, Skan AI, Slack, Smallest.ai, Snowflake, SoundHound AI, Spectro Cloud, Stability AI, Starburst, Streamlit, Supabase, Tabnine, Temporal, Teradata, Together AI, Treble, TwelveLabs, Veridion, Voyage AI, Weave, xAI.