How many subprocessors does Elicit use?

Elicit lists 15 subprocessors on its published list, including Amazon Web Services, Anthropic, OpenAI, Customer.io, and Coreweave and 10 more.

Where does Elicit process customer data?

The subprocessors named by Elicit are located in US, as stated on its list.

Does Elicit have a SOC 2 Type II report?

Yes. Elicit's trust page lists a SOC 2 Type II report: “Elicit Research, PBC SOC 2 Type 2 Report 7.22.26”

Which security certifications does Elicit list?

Elicit's trust page lists SOC 2 Type II.

When was Elicit's subprocessor list last checked?

ClauseTrail last checked Elicit's subprocessor list on November 3, 2026 and last saw it change on October 20, 2026. Lists are re-checked daily.

How do I find out when Elicit adds or removes a subprocessor?

ClauseTrail monitors Elicit's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Elicit Subprocessors List (November 2026): Changes and History

Elicit names 15 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 3, 2026 Last change October 20, 2026 Official source ↗

Elicit subprocessors (November 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services	Cloud service provider	US
2	Anthropic	Anthropic's models are used to give AI responses.	US
3	OpenAI	OpenAI's models are used to give AI responses.	US
4	Customer.io	Emailing updates to users and customers	US
5	Coreweave	Hosting custom ML models	US
6	Datadog	Observability and logging	US
7	Deepnote	Data analysis and reporting	US
8	Google Workspace	Identity provider and email collaboration	US
9	Segment	Data analytics	US
10	Mixpanel	Data analytics	US
11	Heap	Data analytics	US
12	Stripe	Payment processing	US
13	Attio	Customer relationship management	US
14	Intercom	Customer support	US
15	Code Storage	Versioned storage and retrieval of customer workspace content data and artifacts	US

Get an email when Elicit changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Elicit free

Certifications at Elicit

What Elicit's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“Elicit Research, PBC SOC 2 Type 2 Report 7.22.26”
Trust page, trust.elicit.com ↗

Documents we track for Elicit

Subprocessor list: checked November 3, 2026 changed October 20, 2026 trust.elicit.com ↗
Trust page: checked November 2, 2026 changed October 5, 2026 trust.elicit.com ↗

Change history

October 20, 2026

Subprocessor removed

Elicit removed MongoDB from its subprocessor list.
Who else uses MongoDB →

Tracking since October 12, 2026. Every change links to the two versions of the document it came from. All vendors' changes →

Elicit subprocessors FAQ

How many subprocessors does Elicit use?: Elicit lists 15 subprocessors on its published list, including Amazon Web Services, Anthropic, OpenAI, Customer.io, and Coreweave and 10 more.
Where does Elicit process customer data?: The subprocessors named by Elicit are located in US, as stated on its list.
Does Elicit have a SOC 2 Type II report?: Yes. Elicit's trust page lists a SOC 2 Type II report: “Elicit Research, PBC SOC 2 Type 2 Report 7.22.26”
Which security certifications does Elicit list?: Elicit's trust page lists SOC 2 Type II.
When was Elicit's subprocessor list last checked?: ClauseTrail last checked Elicit's subprocessor list on November 3, 2026 and last saw it change on October 20, 2026. Lists are re-checked daily.
How do I find out when Elicit adds or removes a subprocessor?: ClauseTrail monitors Elicit's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.