How many subprocessors does Ably use?

Ably lists 5 subprocessors on its published list, including Amazon Web Services (AWS), Apple, Google, Snowflake, and Metabase.

Where does Ably process customer data?

The subprocessors named by Ably are located in USA, as stated on its list.

How quickly does Ably report a personal data breach to customers?

According to its DPA, Ably reports a personal data breach to customers without undue delay, with no set deadline: “notify Customer without undue delay on becoming aware of a Personal Data security incident”

How much notice does Ably give before adding a subprocessor?

Ably's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “At least 10 business days before Ably engages any new Sub-processor to carry out processing activities on Personal Data on behalf of Customer, Ably will endeavor to update the applicable website and provide Customer notice of that update”

How does Ably transfer personal data outside the EU?

Ably's DPA relies on standard contractual clauses: “The parties agree that the EU Standard Contractual Clauses apply if Personal Data subject to the EU GDPR is transferred to Ably or its Sub-processors located in a third country outside of the EEA”

When was Ably's subprocessor list last checked?

ClauseTrail last checked Ably's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when Ably adds or removes a subprocessor?

ClauseTrail monitors Ably's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Ably Subprocessors List (September 2026): Changes and History

Ably names 5 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Ably subprocessors (September 2026)

#	Subprocessor	Purpose	Location	Data
1	Amazon Web Services (AWS)	Cloud provider. Primary cloud infrastructure provider for Ably, where all realtime services and infrastructure are hosted. Almost all data stored, processed and transmitted through Ably's products and services resides on Amazon Web Services datacenters.	USA	—
2	Apple	Apple Push Notification Service (APNS) — Provider of the APNS service for push notification delivery to iOS devices. Message content transits APNS when messages that contain push payloads are delivered to iOS devices.	USA	Message content
3	Google	Firebase Cloud Messaging (FCM) — Provider of the FCM service for push notification delivery to Android devices. Message content transits FCM when messages that contain push payloads are delivered to Android devices.	USA	Message content
4	Snowflake	Data Warehouse Solution — Provider of cloud-based data warehouse services for storing and processing Ably's operational data. Snowflake serves as the primary repository for data analytics, customer usage metrics, and business intelligence data.	—	connection metadata (IP addresses and client identifiers)
5	Metabase	Business Intelligence and Analytics Platform — Provider of business intelligence and data visualization services for presenting analytics data to customers. Processes data from Snowflake to generate visualizations and reports.	—	connection metadata (IP addresses and client identifiers)

Get an email when Ably changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Ably free

Key DPA terms at Ably

What Ably's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“notify Customer without undue delay on becoming aware of a Personal Data security incident”
DPA, ably.com ↗
Notice of a new subprocessor: 10 days ahead

“At least 10 business days before Ably engages any new Sub-processor to carry out processing activities on Personal Data on behalf of Customer, Ably will endeavor to update the applicable website and provide Customer notice of that update”
DPA, ably.com ↗
Transfers outside the EU: Standard contractual clauses

“The parties agree that the EU Standard Contractual Clauses apply if Personal Data subject to the EU GDPR is transferred to Ably or its Sub-processors located in a third country outside of the EEA”
DPA, ably.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“at the written direction of Customer, delete Personal Data on termination of the Agreement unless required by applicable law to store the Personal Data”
DPA, ably.com ↗
Audit rights: Once a year

“Customer shall not exercise this right more than once per calendar year”
DPA, ably.com ↗

Documents we track for Ably

DPA: checked September 28, 2026 ably.com ↗
Privacy policy: checked September 28, 2026 ably.com ↗
Subprocessor list: checked September 28, 2026 security.ably.com ↗
Terms of service: checked September 28, 2026 ably.com ↗
Trust page: security.ably.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Ably subprocessors FAQ

How many subprocessors does Ably use?: Ably lists 5 subprocessors on its published list, including Amazon Web Services (AWS), Apple, Google, Snowflake, and Metabase.
Where does Ably process customer data?: The subprocessors named by Ably are located in USA, as stated on its list.
How quickly does Ably report a personal data breach to customers?: According to its DPA, Ably reports a personal data breach to customers without undue delay, with no set deadline: “notify Customer without undue delay on becoming aware of a Personal Data security incident”
How much notice does Ably give before adding a subprocessor?: Ably's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “At least 10 business days before Ably engages any new Sub-processor to carry out processing activities on Personal Data on behalf of Customer, Ably will endeavor to update the applicable website and provide Customer notice of that update”
How does Ably transfer personal data outside the EU?: Ably's DPA relies on standard contractual clauses: “The parties agree that the EU Standard Contractual Clauses apply if Personal Data subject to the EU GDPR is transferred to Ably or its Sub-processors located in a third country outside of the EEA”
When was Ably's subprocessor list last checked?: ClauseTrail last checked Ably's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Ably adds or removes a subprocessor?: ClauseTrail monitors Ably's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.