Productivity vendors and their subprocessors

14 productivity vendors with a tracked subprocessor list, re-checked daily. Of the 4 whose trust page we track, 1 lists a SOC 2 Type II report and 2 list ISO 27001.

Key DPA terms across productivity vendors

What each vendor's data processing agreement commits to. The vendor page quotes the sentence behind every answer.

Vendor	Breach notification	Notice of a new subprocessor	Transfers outside the EU
Airtable	Within 72 hours	10 days ahead	Standard contractual clauses
Asana	Without undue delay, with no set deadline	10 days ahead	Standard contractual clauses and the EU–US Data Privacy Framework
Atlassian	Within 72 hours	30 days ahead	Standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions
Calendly	Without undue delay, with no set deadline	30 days ahead	Standard contractual clauses and the EU–US Data Privacy Framework
ClickUp	Without undue delay, with no set deadline	30 days ahead	Standard contractual clauses
Evernote	Without undue delay, with no set deadline	Not stated	Standard contractual clauses
Linear	Without undue delay, with no set deadline	30 days ahead	Standard contractual clauses

Other categories

Security 68 AI 46 Marketing 32 Analytics 30 Developer Tools 26 Finance 23 Data 22 Legal 20 Recruiting 19 Observability 18 Support 18 HR 17 Identity 17 Payments 15 Communication 14 Customer Success 13 Logistics 13 CRM 12 Privacy 12 Sales 12 Compliance 11 Cloud 9 Collaboration 9 Infrastructure 9 Product 9 Communications 8 Construction 8 Education 7 Hospitality 7 Manufacturing 7 Retail 7 Telecom 7 Automation 6 Media 6 Content 5 DevOps 5 E-commerce 5 Energy 3 Healthcare 3 Nonprofit 3 Real Estate 3 Sports 3 Storage 3 Design 2 Government 2 Travel 2 Food 1 Gaming 1 Insurance 1