How many subprocessors does BigID use?

BigID lists 8 subprocessors on its published list, including BigID AU PTE Ltd, BigID SARL, BigID India Private Limited, BigID Portugal LDA, and BigID PTE Ltd and 3 more.

Where does BigID process customer data?

The subprocessors named by BigID are located in Australia, Canada, France, India, Portugal, and Singapore and 2 other locations, as stated on its list.

How quickly does BigID report a personal data breach to customers?

According to its DPA, BigID reports a personal data breach to customers within 72 hours: “Within seventy-two (72) hours of becoming aware of a Security Incident, BigID shall notify Customer”

How much notice does BigID give before adding a subprocessor?

BigID's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Customer shall have the right to object to any change to the Subprocessor List by providing written notice to BigID within thirty (30) days of the date notice is issued”

How does BigID transfer personal data outside the EU?

BigID's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “The EU Standard Contractual Clauses are incorporated into this DPA by reference and apply to transfers of Personal Data to BigID”

When was BigID's subprocessor list last checked?

ClauseTrail last checked BigID's subprocessor list on September 26, 2026. Lists are re-checked daily.

How do I find out when BigID adds or removes a subprocessor?

ClauseTrail monitors BigID's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

BigID Subprocessors List (September 2026): Changes and History

BigID names 8 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

BigID subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	BigID AU PTE Ltd	—	Australia
2	BigID SARL	—	France
3	BigID India Private Limited	—	India
4	BigID Portugal LDA	—	Portugal
5	BigID PTE Ltd	—	Singapore
6	BigID CH Gmbh	—	Switzerland
7	BigID UK Ltd	—	UK
8	BigID Canada Inc	—	Canada

Get an email when BigID changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track BigID free

Key DPA terms at BigID

What BigID's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 72 hours

“Within seventy-two (72) hours of becoming aware of a Security Incident, BigID shall notify Customer”
DPA, bigid.com ↗
Notice of a new subprocessor: 30 days ahead

“Customer shall have the right to object to any change to the Subprocessor List by providing written notice to BigID within thirty (30) days of the date notice is issued”
DPA, bigid.com ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“The EU Standard Contractual Clauses are incorporated into this DPA by reference and apply to transfers of Personal Data to BigID”

“BigID is a member of the EU-US Data Privacy Framework ("DPF"), whereby BigID commits to complying with DPF Principles”
DPA, bigid.com ↗
Customer data after the contract ends: Deleted within 30 days of the contract ending

“BigID shall, delete and make irretrievable all Personal Data in BigID's possession pursuant to the terms of this DPA and the Agreement within thirty (30) days of termination/expiration of the Agreement”
DPA, bigid.com ↗
Audit rights: Through certifications and audit reports only

“make available to a Customer that is not a competitor of BigID (or Customer's independent, third-party auditor that is not a competitor of BigID) a copy of BigID's most recent third-party audits or certifications, as applicable, to demonstrate its compliance with this DPA”
DPA, bigid.com ↗

Documents we track for BigID

DPA: checked September 26, 2026 bigid.com ↗
Privacy policy: checked September 26, 2026 bigid.com ↗
Subprocessor list: checked September 26, 2026 bigid.com ↗
Terms of service: checked September 26, 2026 bigid.com ↗
Trust page: checked September 26, 2026 bigid.com ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

BigID subprocessors FAQ

How many subprocessors does BigID use?: BigID lists 8 subprocessors on its published list, including BigID AU PTE Ltd, BigID SARL, BigID India Private Limited, BigID Portugal LDA, and BigID PTE Ltd and 3 more.
Where does BigID process customer data?: The subprocessors named by BigID are located in Australia, Canada, France, India, Portugal, and Singapore and 2 other locations, as stated on its list.
How quickly does BigID report a personal data breach to customers?: According to its DPA, BigID reports a personal data breach to customers within 72 hours: “Within seventy-two (72) hours of becoming aware of a Security Incident, BigID shall notify Customer”
How much notice does BigID give before adding a subprocessor?: BigID's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Customer shall have the right to object to any change to the Subprocessor List by providing written notice to BigID within thirty (30) days of the date notice is issued”
How does BigID transfer personal data outside the EU?: BigID's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “The EU Standard Contractual Clauses are incorporated into this DPA by reference and apply to transfers of Personal Data to BigID”
When was BigID's subprocessor list last checked?: ClauseTrail last checked BigID's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when BigID adds or removes a subprocessor?: ClauseTrail monitors BigID's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.