AI vendors and their subprocessors

46 ai vendors with a tracked subprocessor list, re-checked daily. Of the 25 whose trust page we track, 16 list a SOC 2 Type II report and 10 list ISO 27001.

  1. AI21 Labs subprocessors
  2. Anthropic subprocessors
  3. Anyscale subprocessors
  4. Avoma subprocessors
  5. Baseten subprocessors
  6. Cerebras subprocessors
  7. Chroma subprocessors
  8. Cohere subprocessors
  9. Colossyan subprocessors
  10. CoreWeave subprocessors
  11. Cursor subprocessors
  12. DataRobot subprocessors
  13. Deepgram subprocessors
  14. Descript subprocessors
  15. Devin subprocessors
  16. ElevenLabs subprocessors
  17. Elicit subprocessors
  18. Encord subprocessors
  19. Factory subprocessors
  20. Fal subprocessors
  21. Fireflies.ai subprocessors
  22. Fireworks AI subprocessors
  23. Glean subprocessors
  24. Groq subprocessors
  25. H2O.ai subprocessors
  26. Hebbia subprocessors
  27. Hugging Face subprocessors
  28. Jasper subprocessors
  29. Langfuse subprocessors
  30. Leonardo AI subprocessors
  31. Luma AI subprocessors
  32. Mistral AI subprocessors
  33. Modal subprocessors
  34. OpenAI subprocessors
  35. OpenRouter subprocessors
  36. Otter.ai subprocessors
  37. Perplexity subprocessors
  38. Replicate subprocessors
  39. Runway subprocessors
  40. SambaNova subprocessors
  41. Scale AI subprocessors
  42. Stability AI subprocessors
  43. Synthesia subprocessors
  44. Together AI subprocessors
  45. Weights & Biases subprocessors
  46. Writer subprocessors

Key DPA terms across ai vendors

What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.

Vendor Breach notification Notice of a new subprocessor Transfers outside the EU
Anthropic Within 48 hours 15 days ahead Standard contractual clauses
Anyscale Without undue delay, with no set deadline 10 days ahead Standard contractual clauses and the EU–US Data Privacy Framework
Avoma Without undue delay, with no set deadline 5 days ahead Standard contractual clauses and the EU–US Data Privacy Framework
Baseten Within 48 hours 15 days ahead Standard contractual clauses
Cursor Within 48 hours 30 days ahead Standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions
ElevenLabs Without undue delay, with no set deadline 30 days ahead Standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions
Fal Without undue delay, with no set deadline 15 days ahead Standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions
H2O.ai Within 72 hours 30 days ahead Standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions
Hebbia Without undue delay, with no set deadline 10 days ahead Standard contractual clauses
Hugging Face Within 72 hours 30 days ahead Standard contractual clauses
Jasper Within 72 hours 10 days ahead Standard contractual clauses
Modal Without undue delay, with no set deadline Not stated Standard contractual clauses and adequacy decisions

Other categories

Security 68 Marketing 32 Analytics 30 Developer Tools 26 Finance 23 Data 22 Legal 20 Recruiting 19 Observability 18 Support 18 HR 17 Identity 17 Payments 15 Communication 14 Productivity 14 Customer Success 13 Logistics 13 CRM 12 Privacy 12 Sales 12 Compliance 11 Cloud 9 Collaboration 9 Infrastructure 9 Product 9 Communications 8 Construction 8 Education 7 Hospitality 7 Manufacturing 7 Retail 7 Telecom 7 Automation 6 Media 6 Content 5 DevOps 5 E-commerce 5 Energy 3 Healthcare 3 Nonprofit 3 Real Estate 3 Sports 3 Storage 3 Design 2 Government 2 Travel 2 Food 1 Gaming 1 Insurance 1