Better Stack Subprocessors List (November 2026): Changes and History
Better Stack names 9 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Better Stack subprocessors (November 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Amazon Web Services, Inc. (United States) | Infrastructure | — |
| 2 | Google Ireland Limited (Europe) | Infrastructure and email communication | — |
| 3 | Cloudflare, Inc. (Global) | Cloud services | — |
| 4 | Hetzner Online GmbH. (Europe) | Infrastructure | — |
| 5 | FrontApp, Inc. (United States) | Customer communication | — |
| 6 | Chartmogul GmbH & Co. (Global) | Analytics and CRM | — |
| 7 | Linear Orbit, Inc. (United States) | Issue tracking and project management | — |
| 8 | Slack Technologies LLC (United States) | Communication | — |
| 9 | OpenAI, L.L.C. (United States) | AI services | — |
Get an email when Better Stack changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Key DPA terms at Better Stack
What Better Stack's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?
- Breach notification
-
Without undue delay, with no set deadline
“Notify Customer of any Personal Data Breach by Better Stack, its Subprocessors, or any other third-parties acting on Better Stack's behalf without undue delay of becoming aware of a Personal Data Breach.”
DPA, betterstack.com ↗ - Transfers outside the EU
-
Standard contractual clauses and the EU–US Data Privacy Framework
“the parties rely on Better Stack's certification under the EU-U.S. Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK-US Data Privacy Framework”
“such transfer shall be subject to the appropriate Standard Contractual Clauses, which shall be deemed incorporated into and form part of this DPA”
DPA, betterstack.com ↗ - Customer data after the contract ends
-
Deleted or returned when the contract ends
“Better Stack shall, and shall cause any Subprocessors to, at the choice of Customer, return all the Customer Personal Data and copies of such data to Customer or securely destroy them”
DPA, betterstack.com ↗ - Audit rights
-
Through certifications and audit reports only
“Better Stack must, upon Customer's request (not to exceed one request per calendar year) by email to dpo@betterstack.com, certify compliance with Sections 5-8 of this DPA in writing.”
DPA, betterstack.com ↗
Certifications at Better Stack
What Better Stack's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?
- SOC 2 Type II
-
Active
“SOC 2 Type 2”
Trust page, betterstack.com ↗ - HIPAA
-
Active
“Is Better Stack HIPAA compliant?”
Trust page, betterstack.com ↗
Documents we track for Better Stack
- DPA
- checked November 3, 2026 betterstack.com ↗
- Privacy policy
- checked November 3, 2026 betterstack.com ↗
- Subprocessor list
- checked November 3, 2026 betterstack.com ↗
- Terms of service
- checked November 3, 2026 betterstack.com ↗
- Trust page
- checked November 3, 2026 betterstack.com ↗
Change history
Tracking since October 18, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Better Stack subprocessors FAQ
- How many subprocessors does Better Stack use?
- Better Stack lists 9 subprocessors on its published list, including Amazon Web Services, Inc. (United States), Google Ireland Limited (Europe), Cloudflare, Inc. (Global), Hetzner Online GmbH. (Europe), and FrontApp, Inc. (United States) and 4 more.
- How quickly does Better Stack report a personal data breach to customers?
- According to its DPA, Better Stack reports a personal data breach to customers without undue delay, with no set deadline: “Notify Customer of any Personal Data Breach by Better Stack, its Subprocessors, or any other third-parties acting on Better Stack's behalf without undue delay of becoming aware of a Personal Data Breach.”
- How does Better Stack transfer personal data outside the EU?
- Better Stack's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “the parties rely on Better Stack's certification under the EU-U.S. Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK-US Data Privacy Framework”
- Does Better Stack have a SOC 2 Type II report?
- Yes. Better Stack's trust page lists a SOC 2 Type II report: “SOC 2 Type 2”
- Which security certifications does Better Stack list?
- Better Stack's trust page lists SOC 2 Type II and HIPAA.
- When was Better Stack's subprocessor list last checked?
- ClauseTrail last checked Better Stack's subprocessor list on November 3, 2026. Lists are re-checked daily.
- How do I find out when Better Stack adds or removes a subprocessor?
- ClauseTrail monitors Better Stack's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.