How many subprocessors does ClickUp use?

ClickUp lists 52 subprocessors on its published list, including Amazon Web Services, Amplitude, APILayer, Artie, and Avalara and 47 more.

Where does ClickUp process customer data?

The subprocessors named by ClickUp are located in USA, China, Australia, Germany, Ireland, and Singapore, as stated on its list.

How quickly does ClickUp report a personal data breach to customers?

According to its DPA, ClickUp reports a personal data breach to customers without undue delay, with no set deadline: “notify Customer of the Information Security Incident without undue delay after becoming aware of the Information Security Incident”

How much notice does ClickUp give before adding a subprocessor?

ClickUp's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “ClickUp will, at least 30 days before the new Subprocessor processes any Customer Personal Data, provide notice of the engagement via email”

How does ClickUp transfer personal data outside the EU?

ClickUp's DPA relies on standard contractual clauses: “The parties agree that the 2021 Standard Contractual Clauses will apply to personal data that is transferred via the Services from the European Economic Area”

When was ClickUp's subprocessor list last checked?

ClauseTrail last checked ClickUp's subprocessor list on September 26, 2026. Lists are re-checked daily.

How do I find out when ClickUp adds or removes a subprocessor?

ClauseTrail monitors ClickUp's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

ClickUp Subprocessors List (September 2026): Changes and History

ClickUp names 52 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

ClickUp subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services	Infrastructure (Cloud Service Provider)	USA, Ireland, Germany, Australia, Singapore
2	Amplitude	Analytics on product use	USA
3	APILayer	IP Address Geolocation	USA
4	Artie	Data Replication	USA
5	Avalara	Sales tax reporting	USA
6	Braintree	Credit card payments	USA
7	Census	Data warehouse integration	USA
8	Chameleon	Analytics on product use	USA
9	Daily	Audio/Video Streaming, Transcription and Recording services	USA
10	Datadog	Logging and Monitoring	USA
11	EXA	Application and infrastructure monitoring	USA
12	Flatfile	Data imports	USA
13	Functional Software, Inc. - Sentry	Mobile application monitoring	USA
14	Google Firebase, Google Analytics, Google Gemini	Mobile app notifications, analytics, Application AI Functionality	USA
15	Iterable	Customer engagement	USA
16	Nylas	Email, calendar, and contact integrations	USA
17	Oracle Netsuite	Subscription management	USA
18	Readme	API docs and development	USA
19	Recall	Transcription Services	USA
20	Relyance AI	Data Governance	USA
21	Segment	Data warehouse, customer data platform	USA
22	Similarweb	Business Intelligence (BI) Analytics	USA
23	Singular Lab, Inc	Analytics on product use	USA
24	SlashNext	Application Security defense functionality	USA
25	Snowflake	Data warehouse	USA
26	Stripe	Credit card payments	USA
27	strongDM	Infrastructure access platform	USA
28	Tableau	Data visualization	USA
29	Twilio	Two-factor authentication codes	USA
30	Upwind	Application and infrastructure monitoring	USA
31	Nodedata	Email Deliverability Checking	USA
32	Vertex	Tax Calculation	USA
33	Wistia, Inc.	Video Content Delivery Network	USA
34	Anthropic	Application AI Functionality	USA
35	AssemblyAI	Application AI Functionality	USA
36	Baseten	Application AI Functionality	USA
37	Brave	Application AI Functionality	USA
38	Browserbase	Application AI Functionality	USA
39	Foundry Labs, Inc	Application AI Functionality - Code Interpreter	USA
40	Kling 3.0	Gen AI	China
41	Microsoft Azure AI Foundry	Application AI Functionality	USA
42	OpenAI	Application AI Functionality	USA
43	Seedance 2.0	Gen AI	China
44	Vercel	Application AI Functionality	USA
45	Canny	Product feedback	USA
46	Maven AGI	Chatbot	USA
47	Salesforce	Customer relationship management (CRM)	USA
48	Zendesk	Customer support communication (chat and email)	USA
49	PDF.co	Document Processing and Conversion	USA
50	Replit Inc	Application hosting and compute infrastructure	USA
51	Skilljar for ClickUp University	Learning management system	USA
52	Workato for ClickUp Professional Services	Enterprise integration platform	USA

Get an email when ClickUp changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track ClickUp free

Key DPA terms at ClickUp

What ClickUp's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“notify Customer of the Information Security Incident without undue delay after becoming aware of the Information Security Incident”
DPA, clickup.com ↗
Notice of a new subprocessor: 30 days ahead

“ClickUp will, at least 30 days before the new Subprocessor processes any Customer Personal Data, provide notice of the engagement via email”
DPA, clickup.com ↗
Transfers outside the EU: Standard contractual clauses

“The parties agree that the 2021 Standard Contractual Clauses will apply to personal data that is transferred via the Services from the European Economic Area”
DPA, clickup.com ↗
Customer data after the contract ends: Deleted within 30 days of the contract ending

“delete any stored Customer Personal Data within thirty (30) days upon customer request”
DPA, clickup.com ↗
Audit rights: Once a year

“Customer may audit ClickUp's compliance with its obligations under this Addendum up to once per year.”
DPA, clickup.com ↗

Documents we track for ClickUp

AI terms: checked September 26, 2026 clickup.com ↗
DPA: checked September 26, 2026 clickup.com ↗
Privacy policy: checked September 26, 2026 clickup.com ↗
Subprocessor list: checked September 26, 2026 clickup.com ↗
Terms of service: checked September 26, 2026 clickup.com ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

ClickUp subprocessors FAQ

How many subprocessors does ClickUp use?: ClickUp lists 52 subprocessors on its published list, including Amazon Web Services, Amplitude, APILayer, Artie, and Avalara and 47 more.
Where does ClickUp process customer data?: The subprocessors named by ClickUp are located in USA, China, Australia, Germany, Ireland, and Singapore, as stated on its list.
How quickly does ClickUp report a personal data breach to customers?: According to its DPA, ClickUp reports a personal data breach to customers without undue delay, with no set deadline: “notify Customer of the Information Security Incident without undue delay after becoming aware of the Information Security Incident”
How much notice does ClickUp give before adding a subprocessor?: ClickUp's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “ClickUp will, at least 30 days before the new Subprocessor processes any Customer Personal Data, provide notice of the engagement via email”
How does ClickUp transfer personal data outside the EU?: ClickUp's DPA relies on standard contractual clauses: “The parties agree that the 2021 Standard Contractual Clauses will apply to personal data that is transferred via the Services from the European Economic Area”
When was ClickUp's subprocessor list last checked?: ClauseTrail last checked ClickUp's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when ClickUp adds or removes a subprocessor?: ClauseTrail monitors ClickUp's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.