Duffel Subprocessors List (November 2026): Changes and History

Duffel names 27 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 3, 2026 Official source ↗

Duffel subprocessors (November 2026)

# Subprocessor Purpose Location Data
1 Active Campaign LLC Marketing email and automation US Customer data
2 Anthropic AI assistance (e.g. Notion connector) US Customer / User data
3 Cloudflare Platform security US Customer / User / Traveller Data
4 Evervault Limited Payment processing EU Cardholder data
5 Fareladder Consulting Services LLC Traveller support US Traveller data
6 Google Cloud Platform Processing and storage (cloud infrastructure) EU Customer / User / Traveller data
7 Hybrid Travel LLC d.b.a. Air1 Aggregator providing access to Suppliers US Traveller data
8 IGT Technologies Inc. Traveller support US Traveller data
9 InTouch CX Inc. Traveller support Canada Traveller data
10 Linear Customer support communications US Customer data
11 Mailgun Technologies, Inc. Transactional emails e.g. password reset US Customer / User data
12 Meili Travel Technology Limited Aggregator for Cars Orders EU Customer / Traveller data
13 Notion Knowledge hub US Customer data
14 OpenAI OpCo LLC AI assistance US Customer / User / Traveller data
15 PEGASUS BUSINESS INTELLIGENCE LP D.B.A ONYX CENTRE SOURCE Payment collections US Customer / User data
16 Plain Customer support communications UK Customer data
17 Posthog Inc. User analytics US Customer / User data
18 Segment.io, Inc. User analytics US Customer / User data
19 Sentry (Functional Software, Inc.) Error reporting and application monitoring (including IP addresses) US Customer / User data
20 Seon Fraud detection EU Customer / User / Traveller data
21 Slack Customer support communications US Customer data
22 Stream.IO Inc Customer / Traveller support US Customer / User / Traveller data
23 Stripe Payment processing (Duffel Payments) EU Cardholder data and Customer KYC data
24 Travelfusion Limited Aggregator for Flights Orders UK Customer / Traveller data
25 Very Good Security Storage and encryption of cardholder data US Cardholder data
26 Zendesk, Inc. Customer / Traveller support US Customer / User / Traveller data
27 Zoom Video conferencing US Customer data

Get an email when Duffel changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Duffel free

Certifications at Duffel

What Duffel's trust page lists, with the text each one comes from.

PCI DSS

Active

“Duffel is PCI-DSS v4 Level 1 compliant.”
Trust page, duffel.com ↗

Documents we track for Duffel

Privacy policy
checked November 3, 2026 duffel.com ↗
Subprocessor list
checked November 3, 2026 trust.duffel.com ↗
Terms of service
checked November 3, 2026 duffel.com ↗
Trust page
checked November 3, 2026 duffel.com ↗

Change history

Tracking since October 12, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Duffel subprocessors FAQ

How many subprocessors does Duffel use?
Duffel lists 27 subprocessors on its published list, including Active Campaign LLC, Anthropic, Cloudflare, Evervault Limited, and Fareladder Consulting Services LLC and 22 more.
Where does Duffel process customer data?
The subprocessors named by Duffel are located in US, EU, UK, and Canada, as stated on its list.
Which security certifications does Duffel list?
Duffel's trust page lists PCI DSS.
When was Duffel's subprocessor list last checked?
ClauseTrail last checked Duffel's subprocessor list on November 3, 2026. Lists are re-checked daily.
How do I find out when Duffel adds or removes a subprocessor?
ClauseTrail monitors Duffel's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.