How many subprocessors does Dremio use?

Dremio lists 8 subprocessors on its published list, including Google Cloud Platform, Amazon Web Services, Auth0, Microsoft Azure, and Sparkpost and 3 more.

Where does Dremio process customer data?

The subprocessors named by Dremio are located in EMEA and United States, as stated on its list.

How quickly does Dremio report a personal data breach to customers?

According to its DPA, Dremio reports a personal data breach to customers without undue delay, with no set deadline: “Upon becoming aware of a Security Incident, Company will notify Customer without undue delay and will provide information relating to the Security Incident as reasonably requested by Customer.”

How much notice does Dremio give before adding a subprocessor?

Dremio's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Company can at any time appoint a new Sub-Processor provided that Customer is given ten (10) days' prior notice and the Customer does not legitimately object to such changes within that timeframe.”

How does Dremio transfer personal data outside the EU?

Dremio's DPA relies on standard contractual clauses and adequacy decisions: “If Company processes Personal Data outside the EEA or an Approved Jurisdiction, then the Parties shall be deemed to enter into the Standard Contractual Clauses, in which event the Customer shall be deemed as the Data Exporter and the Company shall be deemed as the Data Importer”

Which security certifications does Dremio list?

Dremio's trust page lists ISO 27001.

When was Dremio's subprocessor list last checked?

ClauseTrail last checked Dremio's subprocessor list on November 3, 2026. Lists are re-checked daily.

How do I find out when Dremio adds or removes a subprocessor?

ClauseTrail monitors Dremio's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Dremio Subprocessors List (November 2026): Changes and History

Dremio names 8 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 3, 2026 Official source ↗

Dremio subprocessors (November 2026)

#	Subprocessor	Purpose	Location
1	Google Cloud Platform	Dremio Cloud Control Plane Infrastructure	United States, EMEA
2	Amazon Web Services	Dremio Cloud Control Plane Infrastructure	United States, EMEA
3	Auth0	Dremio Cloud Control Plane Authentication Infrastructure	United States, EMEA
4	Microsoft Azure	Dremio Cloud Control Plane Infrastructure	United States, EMEA
5	Sparkpost	Dremio Cloud email communication platform.	United States, EMEA
6	Vanta	Continuous security and compliance monitoring	—
7	Stripe	Dremio Cloud billing and payment processing platform	United States, EMEA
8	Observe	observability platform	—

Get an email when Dremio changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Dremio free

Key DPA terms at Dremio

What Dremio's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Upon becoming aware of a Security Incident, Company will notify Customer without undue delay and will provide information relating to the Security Incident as reasonably requested by Customer.”
DPA, www.dremio.com ↗
Notice of a new subprocessor: 10 days ahead

“Company can at any time appoint a new Sub-Processor provided that Customer is given ten (10) days' prior notice and the Customer does not legitimately object to such changes within that timeframe.”
DPA, www.dremio.com ↗
Transfers outside the EU: Standard contractual clauses and adequacy decisions

“If Company processes Personal Data outside the EEA or an Approved Jurisdiction, then the Parties shall be deemed to enter into the Standard Contractual Clauses, in which event the Customer shall be deemed as the Data Exporter and the Company shall be deemed as the Data Importer”

“"Approved Jurisdiction" means a member state of the European Economic Area, or other jurisdiction as may be approved as having adequate legal protections for data by the European Commission”
DPA, www.dremio.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Following expiration or termination of the Agreement, Company will delete or return to Customer all Personal Data in its possession as provided in the Agreement, except to the extent Company is required under applicable laws to retain the Personal Data.”
DPA, www.dremio.com ↗
Audit rights: Once a year

“Company shall, upon reasonable and written notice and subject to obligations of confidentiality, allow its data processing procedures and documentation to be inspected, no more than once a year and in normal business hours, by Customer (or its designee), at Customer's expense, in order to ascertain compliance with this DPA.”
DPA, www.dremio.com ↗

Certifications at Dremio

What Dremio's trust page lists, with the text each one comes from.

ISO 27001: Active

“ISO 27001:2013”
Trust page, www.dremio.com ↗

Documents we track for Dremio

DPA: checked November 3, 2026 www.dremio.com ↗
Privacy policy: checked November 3, 2026 www.dremio.com ↗
Subprocessor list: checked November 3, 2026 trust.dremio.com ↗
Terms of service: checked November 3, 2026 www.dremio.com ↗
Trust page: checked November 3, 2026 www.dremio.com ↗

Change history

Tracking since October 12, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Dremio subprocessors FAQ

How many subprocessors does Dremio use?: Dremio lists 8 subprocessors on its published list, including Google Cloud Platform, Amazon Web Services, Auth0, Microsoft Azure, and Sparkpost and 3 more.
Where does Dremio process customer data?: The subprocessors named by Dremio are located in EMEA and United States, as stated on its list.
How quickly does Dremio report a personal data breach to customers?: According to its DPA, Dremio reports a personal data breach to customers without undue delay, with no set deadline: “Upon becoming aware of a Security Incident, Company will notify Customer without undue delay and will provide information relating to the Security Incident as reasonably requested by Customer.”
How much notice does Dremio give before adding a subprocessor?: Dremio's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Company can at any time appoint a new Sub-Processor provided that Customer is given ten (10) days' prior notice and the Customer does not legitimately object to such changes within that timeframe.”
How does Dremio transfer personal data outside the EU?: Dremio's DPA relies on standard contractual clauses and adequacy decisions: “If Company processes Personal Data outside the EEA or an Approved Jurisdiction, then the Parties shall be deemed to enter into the Standard Contractual Clauses, in which event the Customer shall be deemed as the Data Exporter and the Company shall be deemed as the Data Importer”
Which security certifications does Dremio list?: Dremio's trust page lists ISO 27001.
When was Dremio's subprocessor list last checked?: ClauseTrail last checked Dremio's subprocessor list on November 3, 2026. Lists are re-checked daily.
How do I find out when Dremio adds or removes a subprocessor?: ClauseTrail monitors Dremio's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.