Marketing vendors and their subprocessors

10 marketing vendors with a tracked subprocessor list, re-checked daily.

  1. ActiveCampaign subprocessors checked September 26, 2026
  2. Customer.io subprocessors checked September 26, 2026
  3. Hootsuite subprocessors checked September 26, 2026
  4. Iterable subprocessors checked September 26, 2026
  5. Klaviyo subprocessors checked September 26, 2026
  6. Mailchimp subprocessors checked September 26, 2026
  7. Qualtrics subprocessors checked September 26, 2026
  8. Sprout Social subprocessors checked September 26, 2026
  9. SurveyMonkey subprocessors checked September 26, 2026
  10. Unbounce subprocessors checked September 26, 2026

Key DPA terms across marketing vendors

What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.

Vendor Breach notification Notice of a new subprocessor Transfers outside the EU
ActiveCampaign Without undue delay, with no set deadline 7 days ahead Standard contractual clauses and the EU–US Data Privacy Framework
Customer.io Without undue delay, with no set deadline 10 days ahead Standard contractual clauses
Hootsuite Without undue delay, with no set deadline 30 days ahead Standard contractual clauses and adequacy decisions
Klaviyo Without undue delay, with no set deadline 15 days ahead Standard contractual clauses and the EU–US Data Privacy Framework
Mailchimp Without undue delay, with no set deadline 10 days ahead Standard contractual clauses and the EU–US Data Privacy Framework