How many subprocessors does Checkmarx use?

Checkmarx lists 16 subprocessors on its published list, including Sub-processor, Amazon Web Services, Inc., Liveperson, Inc., Callidus Software Inc., and Atlassian Inc. and 11 more.

Where does Checkmarx process customer data?

The subprocessors named by Checkmarx are located in Email provider, Web Analytics, Anti-Phishing System, CRM, Content Hosting, and Customer Engagement and 9 other locations, as stated on its list.

Does Checkmarx have a SOC 2 Type II report?

Yes. Checkmarx's trust page lists a SOC 2 Type II report: “SOC 2 Type II”

Which security certifications does Checkmarx list?

Checkmarx's trust page lists SOC 2 Type II and ISO 27001.

When was Checkmarx's subprocessor list last checked?

ClauseTrail last checked Checkmarx's subprocessor list on October 4, 2026. Lists are re-checked daily.

How do I find out when Checkmarx adds or removes a subprocessor?

ClauseTrail monitors Checkmarx's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Checkmarx Subprocessors List (October 2026): Changes and History

Checkmarx names 16 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked October 4, 2026 Official source ↗

Checkmarx subprocessors (October 2026)

#	Subprocessor	Purpose	Location
1	Sub-processor	Location	Purpose
2	Amazon Web Services, Inc.	EU; United States	Hosted Services Provider
3	Liveperson, Inc.	EU; United States	Customer Service Platform
4	Callidus Software Inc.	United States	Training Platform
5	Atlassian Inc.	United States	Content Hosting
6	Mixpanel, Inc.	United States	Web Analytics
7	Google, Inc.	United States	Web Analytics
8	Microsoft, Inc.	United States	Hosted Email Platform
9	Ironscales Ltd.	EU	Anti-Phishing System
10	SFDC Ireland Limited	EU	CRM, Support Platform
11	Sendgrid, Inc.	United States	Email provider
12	Mailchimp, Inc.	United States	Email provider
13	Surveymonkey, Inc.	United States	Surveys
14	HubSpot, Inc.	United States	Email, Customer Engagement
15	IConduct	Israel	IntegrationPlatform
16	Last Updated	19 August 2020	—

Get an email when Checkmarx changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Checkmarx free

Certifications at Checkmarx

What Checkmarx's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“SOC 2 Type II”
Trust page, checkmarx.com ↗
ISO 27001: Active

“ISO 27001”
Trust page, checkmarx.com ↗

Documents we track for Checkmarx

Privacy policy: checked October 4, 2026 checkmarx.com ↗
Subprocessor list: checked October 4, 2026 info.checkmarx.com ↗
Terms of service: checked October 4, 2026 checkmarx.com ↗
Trust page: checked October 4, 2026 checkmarx.com ↗

Change history

Tracking since October 4, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Checkmarx subprocessors FAQ

How many subprocessors does Checkmarx use?: Checkmarx lists 16 subprocessors on its published list, including Sub-processor, Amazon Web Services, Inc., Liveperson, Inc., Callidus Software Inc., and Atlassian Inc. and 11 more.
Where does Checkmarx process customer data?: The subprocessors named by Checkmarx are located in Email provider, Web Analytics, Anti-Phishing System, CRM, Content Hosting, and Customer Engagement and 9 other locations, as stated on its list.
Does Checkmarx have a SOC 2 Type II report?: Yes. Checkmarx's trust page lists a SOC 2 Type II report: “SOC 2 Type II”
Which security certifications does Checkmarx list?: Checkmarx's trust page lists SOC 2 Type II and ISO 27001.
When was Checkmarx's subprocessor list last checked?: ClauseTrail last checked Checkmarx's subprocessor list on October 4, 2026. Lists are re-checked daily.
How do I find out when Checkmarx adds or removes a subprocessor?: ClauseTrail monitors Checkmarx's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.