How many subprocessors does Akeyless use?

Akeyless lists 18 subprocessors on its published list, including Google LLC, Microsoft Corporation (Azure), Microsoft Corporation (Visual Code), Microsoft Corporation (OpenAI), and Atlassian Pty Ltd. and 13 more.

Where does Akeyless process customer data?

The subprocessors named by Akeyless are located in USA, USA and Europe, United States and Europe, Israel, Israel and USA, and United States, as stated on its list.

How quickly does Akeyless report a personal data breach to customers?

According to its DPA, Akeyless reports a personal data breach to customers within 72 hours: “Akeyless will notify the Customer without undue delay, no later than 72 hours, upon becoming aware of any Security Incident involving the Customer Data.”

How much notice does Akeyless give before adding a subprocessor?

Akeyless's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Akeyless may engage an additional or replace an existing Sub-Processors to Process Customer Data, subject to the provision of a thirty (30) days prior notice of its intention to do so to the Customer”

How does Akeyless transfer personal data outside the EU?

Akeyless's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions: “to a recipient that has executed the Standard Contractual Clauses.”

Which security certifications does Akeyless list?

Akeyless's trust page lists ISO 27001, ISO 27701, PCI DSS, and CSA STAR.

When was Akeyless's subprocessor list last checked?

ClauseTrail last checked Akeyless's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when Akeyless adds or removes a subprocessor?

ClauseTrail monitors Akeyless's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Akeyless Subprocessors List (September 2026): Changes and History

Akeyless names 18 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Akeyless subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Google LLC	Hosting Gemini LLM	United States and Europe
2	Microsoft Corporation (Azure)	Hosting	USA and Europe
3	Microsoft Corporation (Visual Code)	Debug, build code, development	USA and Europe
4	Microsoft Corporation (OpenAI)	AI responses, insights, summaries.	USA and Europe
5	Atlassian Pty Ltd.	Project management	United States and Europe
6	Anysphere, Inc. (dba “Cursor”)	Software development and licensing (AI Coding generation tool).	United States
7	Anthropic AI (Claude Code)	Software development and licensing (AI Coding generation tool).	USA
8	Slack Technologies Limited	Internal communication tool for Support	USA
9	OKTA Inc.	Identity and access management (IAM)	USA
10	JFROG LTD	Security Management Services	Israel and USA
11	HUBSPOT & CO LTD	Provision of data	USA
12	Splunk LLC	Logging and Monitoring	USA
13	DataDog Inc.	Monitoring services	USA
14	GitHub Inc.	Code hosting and software updates	USA
15	Pylon Labs, Inc.	Customer Support ticketing	USA
16	Amazon Web Services LLC	Hosting	USA and Europe
17	Twilio Inc.	Cloud communication platform	USA
18	Priority Software Ltd.	Enterprise Resource Planning	Israel

Get an email when Akeyless changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Akeyless free

Key DPA terms at Akeyless

What Akeyless's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 72 hours

“Akeyless will notify the Customer without undue delay, no later than 72 hours, upon becoming aware of any Security Incident involving the Customer Data.”
DPA, www.akeyless.io ↗
Notice of a new subprocessor: 30 days ahead

“Akeyless may engage an additional or replace an existing Sub-Processors to Process Customer Data, subject to the provision of a thirty (30) days prior notice of its intention to do so to the Customer”
DPA, www.akeyless.io ↗
Transfers outside the EU: Standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions

“to a recipient that has executed the Standard Contractual Clauses.”

“Akeyless participates in and certifies compliance with the Data Privacy Framework.”

“to a recipient that has achieved binding corporate rules authorization in accordance with applicable Data Protection Law”

“including to an Adequate Country or data privacy and transfer frameworks”
DPA, www.akeyless.io ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Following the termination or expiration of this DPA, Akeyless shall, at the choice of the Customer, delete or return all Customer Data Processed on behalf of the Customer and certify to the Customer that it has done so.”
DPA, www.akeyless.io ↗
Audit rights: Once a year

“shall make such records available to the Customer upon Customer's thirty (30) days prior written request, however no more than once per twelve (12) months of engagement”
DPA, www.akeyless.io ↗

Certifications at Akeyless

What Akeyless's trust page lists, with the text each one comes from.

ISO 27001: Active

“Akeyless ISO 27001 certified”
Trust page, www.akeyless.io ↗
ISO 27701: Active

“Akeyless ISO 27701 certified”
Trust page, www.akeyless.io ↗
PCI DSS: Active

“Akeyless PCI DSS certified”
Trust page, www.akeyless.io ↗
CSA STAR: Active

“Akeyless CSA STAR Level 1 certified”
Trust page, www.akeyless.io ↗

Documents we track for Akeyless

DPA: checked September 28, 2026 www.akeyless.io ↗
Privacy policy: checked September 28, 2026 www.akeyless.io ↗
Subprocessor list: checked September 28, 2026 www.akeyless.io ↗
Terms of service: checked September 28, 2026 www.akeyless.io ↗
Trust page: checked September 28, 2026 www.akeyless.io ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Akeyless subprocessors FAQ

How many subprocessors does Akeyless use?: Akeyless lists 18 subprocessors on its published list, including Google LLC, Microsoft Corporation (Azure), Microsoft Corporation (Visual Code), Microsoft Corporation (OpenAI), and Atlassian Pty Ltd. and 13 more.
Where does Akeyless process customer data?: The subprocessors named by Akeyless are located in USA, USA and Europe, United States and Europe, Israel, Israel and USA, and United States, as stated on its list.
How quickly does Akeyless report a personal data breach to customers?: According to its DPA, Akeyless reports a personal data breach to customers within 72 hours: “Akeyless will notify the Customer without undue delay, no later than 72 hours, upon becoming aware of any Security Incident involving the Customer Data.”
How much notice does Akeyless give before adding a subprocessor?: Akeyless's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Akeyless may engage an additional or replace an existing Sub-Processors to Process Customer Data, subject to the provision of a thirty (30) days prior notice of its intention to do so to the Customer”
How does Akeyless transfer personal data outside the EU?: Akeyless's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions: “to a recipient that has executed the Standard Contractual Clauses.”
Which security certifications does Akeyless list?: Akeyless's trust page lists ISO 27001, ISO 27701, PCI DSS, and CSA STAR.
When was Akeyless's subprocessor list last checked?: ClauseTrail last checked Akeyless's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Akeyless adds or removes a subprocessor?: ClauseTrail monitors Akeyless's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.