Cookiebot Subprocessors List (October 2026): Changes and History
Cookiebot names 34 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Cookiebot subprocessors (October 2026)
| # | Subprocessor | Purpose | Location | Data |
|---|---|---|---|---|
| 1 | Usercentrics Contract | Data Processing Agreement | — | — |
| 2 | with | the | service | description |
| 3 | (https | //www.cookiebot.com/en/terms-of-service/) of the Processor agreed between the Parties (Main | — | — |
| 4 | Agreement) | collection, management, documentation and transfer of the consent of the Controller's | — | — |
| 5 | 1.2. | Duration of the Agreement | | — |
| 6 | Art. 34 GDPR the following applies | The Processor is obliged (i) to inform the Controller without undue | — | — |
| 7 | Annex 1 | Technical-Organisational Measures/ Safety Concept of the Usercentrics A/S | — | — |
| 8 | ○ Access to Microsoft Azure infrastructure | more information on measures can be | — | — |
| 9 | key and a code. Some employees have been assigned their own key to the office | in | — | — |
| 10 | surveillance cameras in | e.g. the entrance areas). | — | — |
| 11 | o Users access DBMS systems through restricted VPN tunneling | Anonymous access | — | — |
| 12 | o Systems access the DBMS systems through network restricted zones | Anonymous | — | — |
| 13 | o Access restrictions in the software systems processing the data | only authorized | — | — |
| 14 | endum-DPA | Appendix A | — | — |
| 15 | Annex 2 | Sub-processors | — | — |
| 16 | company | Subcontractor | processing | under the Contract |
| 17 | 1 | Microsoft | Microsoft | One Microsoft Place |
| 18 | Azure | Ireland | South County | hosted on servers |
| 19 | Operations Ltd, | Business Park, | within EU member | — |
| 20 | Dublin | Leopardstown, Dublin | states, specifically | — |
| 21 | 2 | Akamai | Akamai | 145 Broadway |
| 22 | Technologies, | Cambridge | | end user |
| 23 | Inc.* | MA 02142 | Geolocation to show | — |
| 24 | 3 | Bunny | BunnyWay | Cesta komandanta |
| 25 | d.o.o. | Staneta 4A | European Union | by the CB customers |
| 26 | Annex 3 | Service Description | — | — |
| 27 | ○ Consent ID | A unique ID that is required so a user can utilize it to request the | — | — |
| 28 | ○ Consent State | 1) Consent categories granted | required to allow the CMP script to | — |
| 29 | user's choice and 2) Version | required to maintain a record of which version of the | — | — |
| 30 | ● URL visited | Required to document where a user gave consent. | — | — |
| 31 | ● User language | required to show the consent banner in the language defined by the Controller | — | — |
| 32 | ● User agent (browser vendor and version, operating system) | required to separate traffic from | — | — |
| 33 | ● IP address | required to enable basic routing of messages on the Internet, to determine the | — | — |
| 34 | ● Geolocation | required to ensure that consent banners shown correspond to the user's | — | — |
Get an email when Cookiebot changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Documents we track for Cookiebot
- Privacy policy
- checked October 2, 2026 changed September 30, 2026 www.cookiebot.com ↗
- Subprocessor list
- checked October 3, 2026 www.cookiebot.com ↗
Change history
-
Privacy policy changed
Cookiebot's third-party processor list now includes new entries for Open AI OpCo LLC (ChatGPT Ads), Taboola Europe Limited (advertising/marketing), and WP Engine (hosting service), each with associated data categories and transfer locations; the 'last update' date changed to September 29th, 2026.
Tracking since October 3, 2026. Every change links to the two versions of the document it came from. All vendors' changes →
Cookiebot subprocessors FAQ
- How many subprocessors does Cookiebot use?
- Cookiebot lists 34 subprocessors on its published list, including Usercentrics Contract, with, (https, Agreement), and 1.2. and 29 more.
- Where does Cookiebot process customer data?
- The subprocessors named by Cookiebot are located in , Akamai, BunnyWay, European Union, Geolocation to show, and Microsoft and 7 other locations, as stated on its list.
- When was Cookiebot's subprocessor list last checked?
- ClauseTrail last checked Cookiebot's subprocessor list on October 3, 2026. Lists are re-checked daily.
- How do I find out when Cookiebot adds or removes a subprocessor?
- ClauseTrail monitors Cookiebot's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.