Infrastructure vendors and their subprocessors
9 infrastructure vendors with a tracked subprocessor list, re-checked daily. Of the 2 whose trust page we track, 1 lists a SOC 2 Type II report and 2 list ISO 27001.
Key DPA terms across infrastructure vendors
What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.
| Vendor | Breach notification | Notice of a new subprocessor | Transfers outside the EU |
|---|---|---|---|
| DigitalOcean | Without undue delay, with no set deadline | 30 days ahead | Standard contractual clauses and the EU–US Data Privacy Framework |
| Google Cloud | Without undue delay, with no set deadline | 30 days ahead | Standard contractual clauses and adequacy decisions |
| Render | Without undue delay, with no set deadline | 10 days ahead | Standard contractual clauses and the EU–US Data Privacy Framework |
| Vercel | Without undue delay, with no set deadline | 5 days ahead | Standard contractual clauses and adequacy decisions |
Other categories
Security 68
AI 46
Marketing 32
Analytics 30
Developer Tools 26
Finance 23
Data 22
Legal 20
Recruiting 19
Observability 18
Support 18
HR 17
Identity 17
Payments 15
Communication 14
Productivity 14
Customer Success 13
Logistics 13
CRM 12
Privacy 12
Sales 12
Compliance 11
Cloud 9
Collaboration 9
Product 9
Communications 8
Construction 8
Education 7
Hospitality 7
Manufacturing 7
Retail 7
Telecom 7
Automation 6
Media 6
Content 5
DevOps 5
E-commerce 5
Energy 3
Healthcare 3
Nonprofit 3
Real Estate 3
Sports 3
Storage 3
Design 2
Government 2
Travel 2
Food 1
Gaming 1
Insurance 1