How many subprocessors does Checkout.com use?

Checkout.com lists 3 subprocessors on its published list, including Amazon Web Services, Checkout Technology Ltd., and Google Cloud Platform.

Where does Checkout.com process customer data?

The subprocessors named by Checkout.com are located in EEA/UK and US/EEA/UK, as stated on its list.

Does Checkout.com have a SOC 2 Type II report?

Yes. Checkout.com's trust page lists a SOC 2 Type II report: “SOC 2 Type II”

Which security certifications does Checkout.com list?

Checkout.com's trust page lists SOC 2 Type II, ISO 27001, and PCI DSS.

When was Checkout.com's subprocessor list last checked?

ClauseTrail last checked Checkout.com's subprocessor list on October 8, 2026. Lists are re-checked daily.

How do I find out when Checkout.com adds or removes a subprocessor?

ClauseTrail monitors Checkout.com's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Checkout.com Subprocessors List (October 2026): Changes and History

Checkout.com names 3 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked October 8, 2026 Official source ↗

Checkout.com subprocessors (October 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services	Cloud Storage Platform; Acquiring transaction traffic for US merchants will be processed via AWS in the US and EU	US/EEA/UK
2	Checkout Technology Ltd.	Payment Processing Services; This wholly-owned subsidiary provides technology and security services to the rest of the Checkout Payments Group.	EEA/UK
3	Google Cloud Platform	BigQuery	EEA/UK

Get an email when Checkout.com changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Checkout.com free

Certifications at Checkout.com

What Checkout.com's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“SOC 2 Type II”
Trust page, trust.checkout.com ↗
ISO 27001: Active

“ISO 27001”
Trust page, trust.checkout.com ↗
PCI DSS: Active

“PCI DSS”
Trust page, trust.checkout.com ↗

Documents we track for Checkout.com

Privacy policy: checked October 8, 2026 www.checkout.com ↗
Subprocessor list: checked October 8, 2026 trust.checkout.com ↗
Trust page: checked October 7, 2026 trust.checkout.com ↗

Change history

Tracking since October 8, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Checkout.com subprocessors FAQ

How many subprocessors does Checkout.com use?: Checkout.com lists 3 subprocessors on its published list, including Amazon Web Services, Checkout Technology Ltd., and Google Cloud Platform.
Where does Checkout.com process customer data?: The subprocessors named by Checkout.com are located in EEA/UK and US/EEA/UK, as stated on its list.
Does Checkout.com have a SOC 2 Type II report?: Yes. Checkout.com's trust page lists a SOC 2 Type II report: “SOC 2 Type II”
Which security certifications does Checkout.com list?: Checkout.com's trust page lists SOC 2 Type II, ISO 27001, and PCI DSS.
When was Checkout.com's subprocessor list last checked?: ClauseTrail last checked Checkout.com's subprocessor list on October 8, 2026. Lists are re-checked daily.
How do I find out when Checkout.com adds or removes a subprocessor?: ClauseTrail monitors Checkout.com's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.