How many subprocessors does Deepnote use?

Deepnote lists 18 subprocessors on its published list, including Amazon Web Services, Anthropic, Open AI, Google Cloud Platform, and Google Workspace and 13 more.

Where does Deepnote process customer data?

The subprocessors named by Deepnote are located in United States and EU, as stated on its list.

How quickly does Deepnote report a personal data breach to customers?

According to its DPA, Deepnote reports a personal data breach to customers without undue delay, with no set deadline: “In the event of a Personal Data Breach, Company shall, without undue delay, inform Customer of the Personal Data Breach”

How much notice does Deepnote give before adding a subprocessor?

Deepnote's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer via email.”

How does Deepnote transfer personal data outside the EU?

Deepnote's DPA relies on standard contractual clauses and adequacy decisions: “The parties agree that ex-EEA Transfers are made pursuant to the EU SCCs, which are deemed entered into (and incorporated into this DPA by this reference) and completed as follows:”

When was Deepnote's subprocessor list last checked?

ClauseTrail last checked Deepnote's subprocessor list on November 2, 2026 and last saw it change on October 17, 2026. Lists are re-checked daily.

How do I find out when Deepnote adds or removes a subprocessor?

ClauseTrail monitors Deepnote's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Deepnote Subprocessors List (November 2026): Changes and History

Deepnote names 18 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 2, 2026 Last change October 17, 2026 Official source ↗

Deepnote subprocessors (November 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services	Hosts and processes data for Deepnote services (compute, storage, networking).	United States
2	Anthropic	Provides language models used in AI-powered product features.	United States
3	Open AI	Provides generative AI models used in product functionality.	United States
4	Google Cloud Platform	Scalable hosting and backend infrastructure.	United States
5	Google Workspace	Provides email, document collaboration, and calendar services for internal operations.	United States
6	ChartMogul	Subscription tracking and analytics for revenue operations.	EU
7	HubSpot	Customer relationship management and sales engagement platform.	United States
8	Intercom	In-product chat and messaging for customer support.	United States
9	ProductBoard	Tool for capturing customer feedback and product planning.	United States
10	Stitch	Transfers and transforms customer data between services.	United States
11	Stripe	Manages billing and payment transactions.	United States
12	WorkOS	Provides enterprise authentication and identity integrations.	United States
13	Microsoft Azure	Infrastructure and AI services supporting cloud functions.	United States
14	Mailgun	Sends automated transactional and system notification emails, including PII.	United States
15	Sentry	Monitors application errors and logs which may include user metadata and PII.	United States
16	Hetzner Cloud	Cloud provider used for compute workloads in proof-of-concept phases.	EU
17	Mistral AI	Provides AI-powered code suggestions in the development experience.	EU
18	PostHog	Tracks product usage and user behavior to support analytics.	United States

Get an email when Deepnote changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Deepnote free

Key DPA terms at Deepnote

What Deepnote's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“In the event of a Personal Data Breach, Company shall, without undue delay, inform Customer of the Personal Data Breach”
DPA, deepnote.com ↗
Notice of a new subprocessor: 10 days ahead

“At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer via email.”
DPA, deepnote.com ↗
Transfers outside the EU: Standard contractual clauses and adequacy decisions

“The parties agree that ex-EEA Transfers are made pursuant to the EU SCCs, which are deemed entered into (and incorporated into this DPA by this reference) and completed as follows:”

“If Company transfers Personal Data protected under this DPA to a jurisdiction for which the European Commission has not issued an adequacy decision, Company will ensure that appropriate safeguards have been implemented for the transfer of Personal Data in accordance with Data Protection Laws.”
DPA, deepnote.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Following completion of the Services, at Customer's choice, Company shall return or delete Customer's Personal Data, unless further storage of such Personal Data is required or authorized by applicable law.”
DPA, deepnote.com ↗
Audit rights: Once a year

“such audit shall only be performed during business hours and occur no more than once per calendar year”
DPA, deepnote.com ↗

Documents we track for Deepnote

DPA: checked November 3, 2026 deepnote.com ↗
Privacy policy: checked November 3, 2026 deepnote.com ↗
Subprocessor list: checked November 2, 2026 changed October 17, 2026 security.deepnote.com ↗
Terms of service: checked November 3, 2026 deepnote.com ↗
Trust page: checked November 2, 2026 security.deepnote.com ↗

Change history

October 17, 2026

Subprocessor removed

Deepnote removed Sprig from its subprocessor list.

Tracking since October 9, 2026. Every change links to the two versions of the document it came from. All vendors' changes →

Deepnote subprocessors FAQ

How many subprocessors does Deepnote use?: Deepnote lists 18 subprocessors on its published list, including Amazon Web Services, Anthropic, Open AI, Google Cloud Platform, and Google Workspace and 13 more.
Where does Deepnote process customer data?: The subprocessors named by Deepnote are located in United States and EU, as stated on its list.
How quickly does Deepnote report a personal data breach to customers?: According to its DPA, Deepnote reports a personal data breach to customers without undue delay, with no set deadline: “In the event of a Personal Data Breach, Company shall, without undue delay, inform Customer of the Personal Data Breach”
How much notice does Deepnote give before adding a subprocessor?: Deepnote's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Company will add such third party to the List and notify Customer via email.”
How does Deepnote transfer personal data outside the EU?: Deepnote's DPA relies on standard contractual clauses and adequacy decisions: “The parties agree that ex-EEA Transfers are made pursuant to the EU SCCs, which are deemed entered into (and incorporated into this DPA by this reference) and completed as follows:”
When was Deepnote's subprocessor list last checked?: ClauseTrail last checked Deepnote's subprocessor list on November 2, 2026 and last saw it change on October 17, 2026. Lists are re-checked daily.
How do I find out when Deepnote adds or removes a subprocessor?: ClauseTrail monitors Deepnote's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.