How many subprocessors does Apollo.io use?

Apollo.io lists 3 subprocessors on its published list, including ISO 27001 Recertification, Cloud Application Security Assessment (CASA), and SOC 2 Type 2 Report (Security, Availability, Confidentiality).

How quickly does Apollo.io report a personal data breach to customers?

According to its DPA, Apollo.io reports a personal data breach to customers within 72 hours: “we will (i) notify you of the Security Incident without undue delay (and in any event within 72 hours of confirmation)”

How much notice does Apollo.io give before adding a subprocessor?

Apollo.io's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “We will notify you of any changes concerning the addition of a new Subprocessor at least thirty (30) days before the new Subprocessor commences its Processing of Customer Personal Data (the "Notice").”

How does Apollo.io transfer personal data outside the EU?

Apollo.io's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “the Parties are deemed to have entered into and signed the EU SCCs and its Annexes, which form part of this DPA and take precedence over the rest of this DPA to the extent of any conflict.”

When was Apollo.io's subprocessor list last checked?

ClauseTrail last checked Apollo.io's subprocessor list on September 26, 2026. Lists are re-checked daily.

How do I find out when Apollo.io adds or removes a subprocessor?

ClauseTrail monitors Apollo.io's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Apollo.io Subprocessors List (September 2026): Changes and History

Apollo.io names 3 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

Apollo.io subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	ISO 27001 Recertification	This international security standard reflects our commitment to protecting your data through comprehensive security practices across all levels of our organization.	—
2	Cloud Application Security Assessment (CASA)	As you rely on our cloud-based platform, this certification confirms that our application meets rigorous security requirements.	—
3	SOC 2 Type 2 Report (Security, Availability, Confidentiality)	Validated by independent auditors, this new report confirms the effectiveness of our controls over time.	—

Get an email when Apollo.io changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Apollo.io free

Key DPA terms at Apollo.io

What Apollo.io's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 72 hours

“we will (i) notify you of the Security Incident without undue delay (and in any event within 72 hours of confirmation)”
DPA, www.apollo.io ↗
Notice of a new subprocessor: 30 days ahead

“We will notify you of any changes concerning the addition of a new Subprocessor at least thirty (30) days before the new Subprocessor commences its Processing of Customer Personal Data (the "Notice").”
DPA, www.apollo.io ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“the Parties are deemed to have entered into and signed the EU SCCs and its Annexes, which form part of this DPA and take precedence over the rest of this DPA to the extent of any conflict.”

“At the time of the execution of the Agreement, Apollo participates in and certifies compliance with the Data Privacy Framework.”
DPA, www.apollo.io ↗
Customer data after the contract ends: Deleted within 90 days of the contract ending

“we will, at your election within 90 (ninety) days of the date of termination of the Agreement:”
DPA, www.apollo.io ↗
Audit rights: Once a year

“such audits or inspections are not conducted more than once per year (unless requested by a Supervisory Authority)”
DPA, www.apollo.io ↗

Documents we track for Apollo.io

AI terms: checked September 26, 2026 www.apollo.io ↗
DPA: checked September 26, 2026 www.apollo.io ↗
Privacy policy: checked September 26, 2026 www.apollo.io ↗
Subprocessor list: checked September 26, 2026 trust.apollo.io ↗
Terms of service: checked September 26, 2026 www.apollo.io ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Apollo.io subprocessors FAQ

How many subprocessors does Apollo.io use?: Apollo.io lists 3 subprocessors on its published list, including ISO 27001 Recertification, Cloud Application Security Assessment (CASA), and SOC 2 Type 2 Report (Security, Availability, Confidentiality).
How quickly does Apollo.io report a personal data breach to customers?: According to its DPA, Apollo.io reports a personal data breach to customers within 72 hours: “we will (i) notify you of the Security Incident without undue delay (and in any event within 72 hours of confirmation)”
How much notice does Apollo.io give before adding a subprocessor?: Apollo.io's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “We will notify you of any changes concerning the addition of a new Subprocessor at least thirty (30) days before the new Subprocessor commences its Processing of Customer Personal Data (the "Notice").”
How does Apollo.io transfer personal data outside the EU?: Apollo.io's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “the Parties are deemed to have entered into and signed the EU SCCs and its Annexes, which form part of this DPA and take precedence over the rest of this DPA to the extent of any conflict.”
When was Apollo.io's subprocessor list last checked?: ClauseTrail last checked Apollo.io's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when Apollo.io adds or removes a subprocessor?: ClauseTrail monitors Apollo.io's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.