How many subprocessors does ButterCMS use?

ButterCMS lists 4 subprocessors on its published list, including Storage Encryption, Key Management, Automatic Rotation, and Access Controls.

Does ButterCMS have a SOC 2 Type II report?

Yes. ButterCMS's trust page lists a SOC 2 Type II report: “SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)”

Which security certifications does ButterCMS list?

ButterCMS's trust page lists SOC 2 Type II and ISO 27001.

When was ButterCMS's subprocessor list last checked?

ClauseTrail last checked ButterCMS's subprocessor list on October 4, 2026. Lists are re-checked daily.

How do I find out when ButterCMS adds or removes a subprocessor?

ClauseTrail monitors ButterCMS's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

ButterCMS Subprocessors List (October 2026): Changes and History

ButterCMS names 4 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked October 4, 2026 Official source ↗

ButterCMS subprocessors (October 2026)

#	Subprocessor	Purpose	Location
1	Storage Encryption	All database storage volumes are encrypted	—
2	Key Management	Encryption keys managed by AWS KMS	—
3	Automatic Rotation	Keys are rotated according to security policies	—
4	Access Controls	Encryption keys accessible only to authorized services	—

Get an email when ButterCMS changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track ButterCMS free

Certifications at ButterCMS

What ButterCMS's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)”
Trust page, buttercms.com ↗
ISO 27001: Active

“ISO 27001 compliant data centers”
Trust page, buttercms.com ↗

Documents we track for ButterCMS

Privacy policy: checked October 4, 2026 buttercms.com ↗
Subprocessor list: checked October 4, 2026 buttercms.com ↗
Terms of service: checked October 4, 2026 buttercms.com ↗
Trust page: checked October 4, 2026 buttercms.com ↗

Change history

Tracking since October 4, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

ButterCMS subprocessors FAQ

How many subprocessors does ButterCMS use?: ButterCMS lists 4 subprocessors on its published list, including Storage Encryption, Key Management, Automatic Rotation, and Access Controls.
Does ButterCMS have a SOC 2 Type II report?: Yes. ButterCMS's trust page lists a SOC 2 Type II report: “SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)”
Which security certifications does ButterCMS list?: ButterCMS's trust page lists SOC 2 Type II and ISO 27001.
When was ButterCMS's subprocessor list last checked?: ClauseTrail last checked ButterCMS's subprocessor list on October 4, 2026. Lists are re-checked daily.
How do I find out when ButterCMS adds or removes a subprocessor?: ClauseTrail monitors ButterCMS's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.