Analytics vendors and their subprocessors

30 analytics vendors with a tracked subprocessor list, re-checked daily. Of the 12 whose trust page we track, 4 list a SOC 2 Type II report and 4 list ISO 27001.

  1. ActionIQ subprocessors
  2. Acxiom subprocessors
  3. Adobe Analytics subprocessors
  4. Adverity subprocessors
  5. Alteryx subprocessors
  6. Amperity subprocessors
  7. Amplitude subprocessors
  8. Census subprocessors
  9. Chartbeat subprocessors
  10. ContentSquare subprocessors
  11. Count subprocessors
  12. Dataiku subprocessors
  13. Deepnote subprocessors
  14. Domo subprocessors
  15. Ensighten subprocessors
  16. Exponea subprocessors
  17. Fathom Analytics subprocessors
  18. FullStory subprocessors
  19. Heap subprocessors
  20. Hex subprocessors
  21. Hotjar subprocessors
  22. Looker subprocessors
  23. Metabase subprocessors
  24. Mixpanel subprocessors
  25. mParticle subprocessors
  26. Pendo subprocessors
  27. PostHog subprocessors
  28. Segment subprocessors
  29. Sigma Computing subprocessors
  30. ThoughtSpot subprocessors

Key DPA terms across analytics vendors

What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.

Vendor Breach notification Notice of a new subprocessor Transfers outside the EU
Alteryx Within 72 hours 30 days ahead Standard contractual clauses
Amplitude Within 48 hours 30 days ahead Standard contractual clauses and the EU–US Data Privacy Framework
Dataiku Within 72 hours 30 days ahead Standard contractual clauses and adequacy decisions
Deepnote Without undue delay, with no set deadline 10 days ahead Standard contractual clauses and adequacy decisions
Fathom Analytics Without undue delay, with no set deadline 14 days ahead Not stated
Hex Within 48 hours 10 days ahead Standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions
Mixpanel Without undue delay, with no set deadline 30 days ahead Standard contractual clauses and the EU–US Data Privacy Framework
Pendo Without undue delay, with no set deadline 30 days ahead Standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions
PostHog Without undue delay, with no set deadline 14 days ahead Standard contractual clauses and the EU–US Data Privacy Framework
Sigma Computing Within 72 hours 45 days ahead Standard contractual clauses and the EU–US Data Privacy Framework

Other categories

Security 68 AI 46 Marketing 32 Developer Tools 26 Finance 23 Data 22 Legal 20 Recruiting 19 Observability 18 Support 18 HR 17 Identity 17 Payments 15 Communication 14 Productivity 14 Customer Success 13 Logistics 13 CRM 12 Privacy 12 Sales 12 Compliance 11 Cloud 9 Collaboration 9 Infrastructure 9 Product 9 Communications 8 Construction 8 Education 7 Hospitality 7 Manufacturing 7 Retail 7 Telecom 7 Automation 6 Media 6 Content 5 DevOps 5 E-commerce 5 Energy 3 Healthcare 3 Nonprofit 3 Real Estate 3 Sports 3 Storage 3 Design 2 Government 2 Travel 2 Food 1 Gaming 1 Insurance 1