Chainguard Subprocessors List (November 2026): Changes and History
Chainguard names 10 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Chainguard subprocessors (November 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Amazon Web Services | Cloud provider | United States |
| 2 | Anthropic (Claude AI) | LLM and AI | United States |
| 3 | Cloudflare | Content delivery services | United States |
| 4 | Google Cloud Platform | Cloud service provider and AI | United States |
| 5 | HubSpot (Clearbit) | Communication (e.g., Activity Center) | United States |
| 6 | Knock | Notification and updates (e.g., Activity Center) | United States |
| 7 | Okta | Identity management services | United States |
| 8 | OpenAI | LLM an AI | United States |
| 9 | Vercel | Data infrastructure and hosting services | United States, United Kingdom, Spain |
| 10 | Zendesk | Customer support platform | United States |
Get an email when Chainguard changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Certifications at Chainguard
What Chainguard's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?
- SOC 2 Type II
-
Active
“SOC 2 Type II”
Trust page, security.chainguard.dev ↗ - ISO 27001
-
Active
“ISO 27001:2022”
Trust page, security.chainguard.dev ↗
Documents we track for Chainguard
- Privacy policy
- checked November 3, 2026 changed September 30, 2026 www.chainguard.dev ↗
- Subprocessor list
- checked November 2, 2026 changed October 29, 2026 security.chainguard.dev ↗
- Terms of service
- checked November 3, 2026 changed November 3, 2026 www.chainguard.dev ↗
- Trust page
- checked November 3, 2026 changed October 30, 2026 security.chainguard.dev ↗
Change history
-
Terms of service changed
The document title was changed from "Terms of Use" to "Website Terms of Use"; no substantive text changed.
-
Purpose changed
Chainguard changed what Google Cloud Platform does with customer data: Cloud service provider and AI (before: Cloud service provider).
Who else uses Google Cloud → -
Subprocessor added
Chainguard added OpenAI (United States), an AI provider, as a subprocessor.
Who else uses OpenAI → -
Subprocessor added
Chainguard added Anthropic (Claude AI) (United States) as a subprocessor.
-
Subprocessor added
Chainguard added Amazon Web Services (United States) as a subprocessor.
Who else uses Amazon Web Services → -
Privacy policy changed
The Contact Us section now adds an EU Representative contact under Article 27 GDPR (eu-privacy-contact@chainguard.dev) alongside the existing privacy-contact@chainguard.dev address.
Tracking since October 21, 2026. Every change links to the two versions of the document it came from. All vendors' changes →
Chainguard subprocessors FAQ
- How many subprocessors does Chainguard use?
- Chainguard lists 10 subprocessors on its published list, including Amazon Web Services, Anthropic (Claude AI), Cloudflare, Google Cloud Platform, and HubSpot (Clearbit) and 5 more.
- Where does Chainguard process customer data?
- The subprocessors named by Chainguard are located in United States, Spain, and United Kingdom, as stated on its list.
- Does Chainguard have a SOC 2 Type II report?
- Yes. Chainguard's trust page lists a SOC 2 Type II report: “SOC 2 Type II”
- Which security certifications does Chainguard list?
- Chainguard's trust page lists SOC 2 Type II and ISO 27001.
- When was Chainguard's subprocessor list last checked?
- ClauseTrail last checked Chainguard's subprocessor list on November 2, 2026 and last saw it change on October 29, 2026. Lists are re-checked daily.
- How do I find out when Chainguard adds or removes a subprocessor?
- ClauseTrail monitors Chainguard's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.