Marketing vendors and their subprocessors
10 marketing vendors with a tracked subprocessor list, re-checked daily.
- ActiveCampaign subprocessors checked September 26, 2026
- Customer.io subprocessors checked September 26, 2026
- Hootsuite subprocessors checked September 26, 2026
- Iterable subprocessors checked September 26, 2026
- Klaviyo subprocessors checked September 26, 2026
- Mailchimp subprocessors checked September 26, 2026
- Qualtrics subprocessors checked September 26, 2026
- Sprout Social subprocessors checked September 26, 2026
- SurveyMonkey subprocessors checked September 26, 2026
- Unbounce subprocessors checked September 26, 2026
Key DPA terms across marketing vendors
What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.
| Vendor | Breach notification | Notice of a new subprocessor | Transfers outside the EU |
|---|---|---|---|
| ActiveCampaign | Without undue delay, with no set deadline | 7 days ahead | Standard contractual clauses and the EU–US Data Privacy Framework |
| Customer.io | Without undue delay, with no set deadline | 10 days ahead | Standard contractual clauses |
| Hootsuite | Without undue delay, with no set deadline | 30 days ahead | Standard contractual clauses and adequacy decisions |
| Klaviyo | Without undue delay, with no set deadline | 15 days ahead | Standard contractual clauses and the EU–US Data Privacy Framework |
| Mailchimp | Without undue delay, with no set deadline | 10 days ahead | Standard contractual clauses and the EU–US Data Privacy Framework |