How many subprocessors does Dataiku use?

Dataiku lists 17 subprocessors on its published list, including Amazon Web Services Inc., (If applicable and enabled by Customer) Snowflake Inc., Intercom Inc., Auth0, and Freshworks, Inc and 12 more.

Where does Dataiku process customer data?

The subprocessors named by Dataiku are located in USA, Worldwide (at Customer’s discretion), Canada, Japan, Kingdom of Saudi Arabia, and Netherlands and 5 other locations, as stated on its list.

Does Dataiku use customer data to train AI models?

According to its privacy policy, Dataiku uses customer data to train AI models unless customers opt out: “Unless you have given us your consent to do so, we will not use your data to train our models.”

Which AI model providers does Dataiku send customer data to?

Azure OpenAI and OpenAI are named in Dataiku's DPA: “(If AI Services is enabled) OpenAI LLC | AI Services | Worldwide (at Customer's discretion)”

How quickly does Dataiku report a personal data breach to customers?

According to its DPA, Dataiku reports a personal data breach to customers within 72 hours: “Dataiku will (a) notify Customer of the Security Incident within 72 hours”

How much notice does Dataiku give before adding a subprocessor?

Dataiku's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Dataiku will update these lists of Subprocessors at least thirty (30) working days prior to using the Subprocessor.”

How does Dataiku transfer personal data outside the EU?

Dataiku's DPA relies on standard contractual clauses and adequacy decisions: “such transfer shall, subject to Sections 3.4 and 3.5 of this DPA, be governed by the Standard Contractual Clauses.”

Which security certifications does Dataiku list?

Dataiku's trust page lists ISO 27001, ISO 27701, ISO 42001, and HIPAA.

When was Dataiku's subprocessor list last checked?

ClauseTrail last checked Dataiku's subprocessor list on October 4, 2026. Lists are re-checked daily.

How do I find out when Dataiku adds or removes a subprocessor?

ClauseTrail monitors Dataiku's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Dataiku Subprocessors List (October 2026): Changes and History

Dataiku names 17 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked October 4, 2026 Official source ↗

Dataiku subprocessors (October 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services Inc.	Cloud Services Provider	Worldwide (at Customer’s discretion)
2	(If applicable and enabled by Customer) Snowflake Inc.	Data warehousing, storage and compute	Worldwide (at Customer’s discretion)
3	Intercom Inc.	Support services	USA
4	Auth0	Authentication	USA
5	Freshworks, Inc	Support services	USA
6	Microsoft Azure	Cloud Services Provider	Worldwide (at Customer’s discretion)
7	Google Cloud Platform	Cloud Services Provider	Worldwide (at Customer’s discretion)
8	Dataiku Inc.	—	USA
9	Dataiku Pte. Ltd.	—	Singapore
10	Dataiku AI FZ-LLC	—	UAE
11	Dataiku B.V.	—	Netherlands
12	Dataiku Japan K.K.	—	Japan
13	Dataiku Canada Ltd.	—	Canada
14	Dataiku Switzerland GmbH	—	Switzerland
15	Dataiku Korea, LLC	—	Republic of Korea
16	Dataiku Spain, S.L.	—	Spain
17	Dataiku Gulf Limited	—	Kingdom of Saudi Arabia

Get an email when Dataiku changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Dataiku free

AI and customer data at Dataiku

What Dataiku's own documents say, with the sentence each answer comes from.

Trains AI models on customer data: Yes, unless you opt out

“Unless you have given us your consent to do so, we will not use your data to train our models.”
Privacy policy, www.dataiku.com ↗
Sends customer data to AI model providers: Yes: Azure OpenAI and OpenAI

“content (which may include personal data) you input will be processed by us and the applicable Third Party AI Provider”
Privacy policy, www.dataiku.com ↗
How to opt out: Dataiku will not train its models on customer data unless the customer gives explicit consent to do so.

“Unless you have given us your consent to do so, we will not use your data to train our models.”
Privacy policy, www.dataiku.com ↗

Key DPA terms at Dataiku

What Dataiku's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 72 hours

“Dataiku will (a) notify Customer of the Security Incident within 72 hours”
DPA, www.dataiku.com ↗
Notice of a new subprocessor: 30 days ahead

“Dataiku will update these lists of Subprocessors at least thirty (30) working days prior to using the Subprocessor.”
DPA, www.dataiku.com ↗
Transfers outside the EU: Standard contractual clauses and adequacy decisions

“such transfer shall, subject to Sections 3.4 and 3.5 of this DPA, be governed by the Standard Contractual Clauses.”

“other than to a country or territory ensuring an adequate level of protection for the rights and freedoms of Data Subjects in relation to the Processing of personal data as determined by the European Commission, or UK Information Commissioner”
DPA, www.dataiku.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Following termination or expiration of the Agreement, Dataiku shall, in accordance with its obligations under the Agreement, delete all Customer Personal Data from Dataiku's systems.”
DPA, www.dataiku.com ↗
Audit rights: Once a year

“Dataiku will, upon reasonable request from Customer with at least 60 days' prior notice, and no more than once per annum, allow for and contribute to audits, including inspections, conducted by Customer”
DPA, www.dataiku.com ↗

Certifications at Dataiku

What Dataiku's trust page lists, with the text each one comes from.

ISO 27001: Active

“ISO 27001 & ISO 27701”
Trust page, www.dataiku.com ↗
ISO 27701: Active

“ISO 27001 & ISO 27701”
Trust page, www.dataiku.com ↗
ISO 42001: Active

“ISO 42001”
Trust page, www.dataiku.com ↗
HIPAA: Active

“HIPAA”
Trust page, www.dataiku.com ↗

Documents we track for Dataiku

DPA: checked October 4, 2026 www.dataiku.com ↗
Privacy policy: checked October 4, 2026 www.dataiku.com ↗
Subprocessor list: checked October 4, 2026 www.dataiku.com ↗
Terms of service: checked October 4, 2026 www.dataiku.com ↗
Trust page: checked October 4, 2026 www.dataiku.com ↗

Change history

Tracking since October 4, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Dataiku subprocessors FAQ

How many subprocessors does Dataiku use?: Dataiku lists 17 subprocessors on its published list, including Amazon Web Services Inc., (If applicable and enabled by Customer) Snowflake Inc., Intercom Inc., Auth0, and Freshworks, Inc and 12 more.
Where does Dataiku process customer data?: The subprocessors named by Dataiku are located in USA, Worldwide (at Customer’s discretion), Canada, Japan, Kingdom of Saudi Arabia, and Netherlands and 5 other locations, as stated on its list.
Does Dataiku use customer data to train AI models?: According to its privacy policy, Dataiku uses customer data to train AI models unless customers opt out: “Unless you have given us your consent to do so, we will not use your data to train our models.”
Which AI model providers does Dataiku send customer data to?: Azure OpenAI and OpenAI are named in Dataiku's DPA: “(If AI Services is enabled) OpenAI LLC | AI Services | Worldwide (at Customer's discretion)”
How quickly does Dataiku report a personal data breach to customers?: According to its DPA, Dataiku reports a personal data breach to customers within 72 hours: “Dataiku will (a) notify Customer of the Security Incident within 72 hours”
How much notice does Dataiku give before adding a subprocessor?: Dataiku's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Dataiku will update these lists of Subprocessors at least thirty (30) working days prior to using the Subprocessor.”
How does Dataiku transfer personal data outside the EU?: Dataiku's DPA relies on standard contractual clauses and adequacy decisions: “such transfer shall, subject to Sections 3.4 and 3.5 of this DPA, be governed by the Standard Contractual Clauses.”
Which security certifications does Dataiku list?: Dataiku's trust page lists ISO 27001, ISO 27701, ISO 42001, and HIPAA.
When was Dataiku's subprocessor list last checked?: ClauseTrail last checked Dataiku's subprocessor list on October 4, 2026. Lists are re-checked daily.
How do I find out when Dataiku adds or removes a subprocessor?: ClauseTrail monitors Dataiku's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.