SaaS Subprocessor & DPA Directory
Search and inspect current subprocessor disclosures, cloud hosting footprints, and Data Processing Agreements for 100+ popular cloud infrastructure and developer platforms.
Airbyte
Open-source data integration platform for moving data between systems.
Airtable
Low-code platform for building collaborative apps and databases.
Amazon Web Services
Amazon Web Services is the world's largest cloud provider. AWS operates as a data processor for organizations using their services to process personal data, requiring GDPR Article 28 compliance documentation.
Anthropic
Anthropic provides the Claude AI model family via API. As an AI company processing potentially sensitive business data, their subprocessor disclosures are critical for enterprise compliance.
Asana
Work management platform for teams to organize, track, and manage their work.
Auth0 (Okta)
Auth0, now part of Okta, is a leading identity platform providing authentication, authorization, and user management. Their subprocessors handle identity verification, session management, and threat detection.
Backblaze B2
S3-compatible cloud object storage at a fraction of the cost.
Braintree (PayPal)
Braintree, a PayPal service, provides payment processing APIs for SaaS companies. Their subprocessors include major cloud providers and fraud detection services.
Brevo (Sendinblue)
All-in-one marketing platform including email, SMS, and CRM.
Clearbit (HubSpot)
B2B data enrichment platform for lead intelligence and qualification.
Clerk
Clerk is a modern user authentication and session management platform built for Next.js and React applications. Their subprocessors support identity verification, email delivery, and session storage.
Cloudflare
Cloudflare provides CDN, DDoS protection, DNS, and Zero Trust security services. As traffic proxied through Cloudflare may include personal data, their GDPR subprocessors are a compliance requirement.
Cloudinary
Media management and optimization platform for web and mobile.
Cohere
Cohere provides enterprise NLP APIs for text embedding, classification, and generation. Their subprocessor list is relevant for any regulated industry using Cohere APIs.
Databricks
Unified data analytics platform combining data engineering, data science, and ML.
Datadog
Datadog is a monitoring and observability platform for cloud applications. As a processor of infrastructure logs, metrics, and traces, their subprocessor disclosures affect companies with GDPR obligations.
Drift (Salesloft)
Conversational marketing and sales platform with AI chatbots.
Fly.io
Platform for deploying full-stack apps and databases close to users.
Freshdesk (Freshworks)
Freshdesk is a customer support helpdesk platform by Freshworks. Used by thousands of SaaS companies to manage customer tickets and communications, requiring GDPR subprocessor review.
GitHub
GitHub is the world's leading code collaboration platform, owned by Microsoft. Organizations hosting code and CI/CD workflows on GitHub must review their subprocessor list for GDPR Article 28 compliance.
GitLab
GitLab is a complete DevOps platform offering source code management, CI/CD, and security scanning. Their subprocessor list covers the infrastructure powering millions of developer workflows.
Google Cloud Platform
Google Cloud Platform provides a suite of cloud computing services. GCP discloses its subprocessors for GDPR Article 28 compliance, including Google entities and approved third-party vendors.
Grafana Labs
Open and composable observability and data visualization platform.
Heap
Digital insights platform that automatically captures user interactions.
HubSpot
HubSpot is a leading CRM, marketing, and sales platform. As a processor of large volumes of contact and behavioral data, HubSpot's subprocessor list is essential for compliance teams in the EU and beyond.
Intercom
Intercom is a conversational CRM and customer messaging platform. Their subprocessors process customer conversation data, user behavior analytics, and support ticket information.
Jira (Atlassian)
Jira is Atlassian's flagship project management tool used by millions of software teams worldwide. Their extensive subprocessor network covers the full Atlassian suite of products.
Linear
Linear is a modern project management and issue tracking tool built for software teams. Their minimalist subprocessor footprint is a draw for compliance-conscious engineering organizations.
LogRocket
Frontend monitoring with session replay, error tracking, and product analytics.
Mailgun
Mailgun is a developer-focused email API service for transactional and marketing email. Sinch company. Their EU data region supports GDPR data residency requirements.
Microsoft Azure
Microsoft Azure is a leading cloud platform used by enterprise organizations worldwide. Their subprocessor disclosures cover data storage, compute, and AI workloads under GDPR Article 28.
Mixpanel
Mixpanel is a product analytics platform that tracks user interactions and behavioral flows. Their subprocessors process event data, user identification, and retention metrics.
MongoDB Atlas
MongoDB Atlas is a multi-cloud database service for document-oriented workloads. Their GDPR subprocessors include major cloud platforms and operational tooling vendors.
New Relic
Observability platform for monitoring, debugging, and improving software.
Notion
Notion is an all-in-one workspace used for documentation, project management, and databases. As a tool often containing sensitive business information, their subprocessor disclosures are critical for enterprise compliance.
Okta
Enterprise identity platform connecting companies to their employees and customers.
OpenAI
OpenAI provides large language model APIs including GPT-4 and GPT-4o. Their subprocessor list details cloud providers and infrastructure vendors processing user data on their behalf.
Paddle
Paddle is a Merchant of Record and payment infrastructure provider for SaaS companies. They handle global tax compliance and payment processing as a data processor.
PlanetScale
PlanetScale is a MySQL-compatible serverless database platform built on Vitess. Their subprocessors support database infrastructure, monitoring, and customer support functions.
PostHog
Open-source product analytics with session recording and feature flags.
Postmark
Postmark is a high-deliverability transactional email service built for developers. Their focused infrastructure approach means a smaller subprocessor footprint than competitors.
QuickBooks (Intuit)
QuickBooks is Intuit's cloud accounting and financial management platform. As a processor of financial data, their subprocessors handling banking connections, payroll, and tax data require careful compliance review.
Railway
Developer-first cloud platform for deploying apps and databases.
Recurly
Subscription management platform for recurring revenue businesses.
Salesforce
Salesforce is the world's #1 CRM platform, processing mission-critical customer data. Their GDPR subprocessor disclosures cover a wide ecosystem of integrated services and infrastructure.
Segment (Twilio)
Segment is a customer data platform (CDP) that aggregates and routes user behavioral data to analytics and marketing destinations. Their subprocessors include all downstream data destinations.
SendGrid (Twilio)
SendGrid is the leading transactional email API, part of Twilio. They process email content, recipient addresses, and engagement metrics on behalf of SaaS companies.
Slack
Slack is a widely-used business communication platform, now part of Salesforce. Their subprocessor list covers message storage, search indexing, and third-party integrations that process business communication data.
Snowflake
Cloud data platform for data warehousing, data lake, and data sharing.
Stripe
Stripe is the global payment infrastructure powering millions of businesses. Their subprocessor list discloses third-party entities involved in payment processing, fraud detection, and data storage under GDPR Article 28.
Supabase
Supabase provides open-source Firebase alternative services including PostgreSQL database, authentication, and real-time subscriptions. Their subprocessors include cloud providers and analytics vendors.
Twilio
Twilio is a cloud communications platform providing SMS, voice, email, and video APIs. As a processor of sensitive communication data including phone numbers, their subprocessors require careful GDPR review.
Vercel
Vercel is an edge hosting platform for frontend frameworks and serverless functions. Organizations deploying applications on Vercel require their GDPR subprocessor documentation for DPA compliance.
Zendesk
Zendesk is a leading customer service and support platform. Their subprocessors handle ticket storage, AI-assisted routing, and multi-channel support data including personal customer information.
Zoom
Zoom is the leading video conferencing platform. Meeting recordings, transcripts, and attendee data are processed through their subprocessor network across global cloud infrastructure.
ZoomInfo
Go-to-market intelligence platform for B2B sales and marketing.