Descartes Subprocessors List (November 2026): Changes and History

Descartes names 53 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 2, 2026 Official source ↗

Descartes subprocessors (November 2026)

# Subprocessor Purpose Location
1 Amazon.com Inc. AWS Cloud Hosting, Amazon Marketplace Worldwide
2 Continental Broadband Pennsylvania, LLC Hosting Services USA
3 CoreSite Realty Corporation Hosting Services USA
4 Crowdstrike Holdings, Inc. Security services USA
5 Data8 Limited Data hygiene Canada, UK
6 Evolve IP, LLC Hosting Services USA
7 Freshworks, Inc. Management and administrative tools USA
8 M247 Security services UK
9 Mailchimp (The Rocket Science Group LLC) Outbound communications USA
10 Mailgun Technologies, Inc. Outbound communications USA
11 Microsoft Corporation Azure cloud hosting services, PowerBI Services, Office 365 Australia, USA, Canada
12 Mixpanel, Inc. User analytics USA
13 NewNet Hosting Services UK
14 R-Kom Hosting Services Germany
15 SAP SE Management and administrative tools USA
16 Aerospace Software Developments Limited — Ireland
17 BoxTop Technologies Limited — United Kingdom
18 Core Transport Technologies NZ Limited — New Zealand
19 Descartes GroundCloud, Inc. — U.S.A.
20 Descartes Hamburg GmbH — Germany
21 Descartes Insurance Services, Inc. — U.S.A.
22 Descartes labs informacijske tehnologije, d.o.o. — Slovenia
23 Descartes STEPcom AG — Switzerland
24 Descartes Systems (Belgium) N.V. — Belgium
25 Descartes Systems (Canada) Inc. — Canada
26 Descartes Systems (Czech Republic) s.r.o. — Czech Republic
27 Descartes Systems (Germany) GmbH — Germany
28 Descartes Systems (NL) B.V. — The Netherlands
29 Descartes Systems (Norway) AS — Norway
30 Descartes Systems (Philippines), Inc. — Philippines
31 Descartes Systems (Slovakia) s.r.o. — Slovakia
32 Descartes Systems (Sweden) AB — Sweden
33 Descartes Systems (USA) LLC — U.S.A.
34 Descartes Systems Australia PTY Ltd. — Austrialia
35 Descartes Systems HK Limited — China
36 Descartes Systems India Private Limited — India
37 Descartes Systems Japan Inc. — Japan
38 Descartes Systems UK Limited — United Kingdom
39 Descartes Systems Uruguay S.A. — Urguay
40 Descartes Visual Compliance (USA) LLC — U.S.A.
41 EDI Customs Brokers Inc. — Canada
42 Finale, Inc. — U.S.A.
43 Infodis B.V. — The Netherlands
44 InterCommIT B.V. — The Netherlands
45 MacroPoint LLC — U.S.A.
46 Descartes U.S. Holdings, Inc. — USA
47 Peoplevox Poland sp. z.o.o. — Poland
48 Rock Solid Internet Systems, LLC — U.S.A.
49 Routing France SARL — France
50 Sellercloud LLC — U.S.A.
51 The Descartes Systems (Suzhou) Co., Ltd. — China
52 The Descartes Systems Group Inc. — Canada
53 XPS Ship, LLC — U.S.A.

Get an email when Descartes changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Descartes free

Key DPA terms at Descartes

What Descartes's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification

Within 72 hours

“within seventy two (72) hours, or sooner as required by applicable law, provide to Customer a notification of the occurrence of the Security Breach”
DPA, www.descartes.com ↗
Transfers outside the EU

Standard contractual clauses

“Module 2 of the Model Clauses will apply and with the following options selected: clause 7, option 2 for clause 9a, option 2 for clause 17;”
DPA, www.descartes.com ↗
Customer data after the contract ends

Deleted or returned when the contract ends

“Descartes will, within a commercially reasonable period of time, destroy or render unreadable all Personal Data received by Descartes from Customer that is and still under the control of Descartes”
DPA, www.descartes.com ↗
Audit rights

Once a year

“audit Descartes' compliance with the terms of this DPA up to once per year”
DPA, www.descartes.com ↗

Documents we track for Descartes

DPA
checked November 3, 2026 www.descartes.com ↗
Privacy policy
checked November 3, 2026 www.descartes.com ↗
Subprocessor list
checked November 2, 2026 www.descartes.com ↗

Change history

Tracking since October 29, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Descartes subprocessors FAQ

How many subprocessors does Descartes use?
Descartes lists 53 subprocessors on its published list, including Amazon.com Inc., Continental Broadband Pennsylvania, LLC, CoreSite Realty Corporation, Crowdstrike Holdings, Inc., and Data8 Limited and 48 more.
Where does Descartes process customer data?
The subprocessors named by Descartes are located in USA, U.S.A., Canada, Germany, The Netherlands, and UK and 20 other locations, as stated on its list.
How quickly does Descartes report a personal data breach to customers?
According to its DPA, Descartes reports a personal data breach to customers within 72 hours: “within seventy two (72) hours, or sooner as required by applicable law, provide to Customer a notification of the occurrence of the Security Breach”
How does Descartes transfer personal data outside the EU?
Descartes's DPA relies on standard contractual clauses: “Module 2 of the Model Clauses will apply and with the following options selected: clause 7, option 2 for clause 9a, option 2 for clause 17;”
When was Descartes's subprocessor list last checked?
ClauseTrail last checked Descartes's subprocessor list on November 2, 2026. Lists are re-checked daily.
How do I find out when Descartes adds or removes a subprocessor?
ClauseTrail monitors Descartes's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.