How many subprocessors does Evernote use?

Evernote lists 11 subprocessors on its published list, including Bird, Calendly, Datadog, Fastly, and Google Cloud and 6 more.

Where does Evernote process customer data?

The subprocessors named by Evernote are located in United States and Ireland, as stated on its list.

How quickly does Evernote report a personal data breach to customers?

According to its DPA, Evernote reports a personal data breach to customers without undue delay, with no set deadline: “Processor will notify Customer without undue delay after becoming aware of a Personal Data Breach.”

How does Evernote transfer personal data outside the EU?

Evernote's DPA relies on standard contractual clauses: “to adopt the guarantees required by the GDPR, including the Standard Contractual Clauses of the European Commission Implementing Decision (EU) 2021/914”

When was Evernote's subprocessor list last checked?

ClauseTrail last checked Evernote's subprocessor list on November 3, 2026. Lists are re-checked daily.

How do I find out when Evernote adds or removes a subprocessor?

ClauseTrail monitors Evernote's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Evernote Subprocessors List (November 2026): Changes and History

Evernote names 11 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 3, 2026 Official source ↗

Evernote subprocessors (November 2026)

#	Subprocessor	Purpose	Location
1	Bird	Infrastructure services	United States
2	Calendly	Customer support	United States
3	Datadog	Service maintenance	United States
4	Fastly	Infrastructure services	United States
5	Google Cloud	Infrastructure services	United States
6	Google Analytics	Analytics	United States
7	hCaptcha	Infrastructure services	United States
8	Invision Power Boards	Community	United States
9	OpenAI	AI-powered processing	Ireland
10	Sentry	Service maintenance	United States
11	Zendesk	Customer support	United States

Get an email when Evernote changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Evernote free

Key DPA terms at Evernote

What Evernote's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Processor will notify Customer without undue delay after becoming aware of a Personal Data Breach.”
DPA, evernote.com ↗
Transfers outside the EU: Standard contractual clauses

“to adopt the guarantees required by the GDPR, including the Standard Contractual Clauses of the European Commission Implementing Decision (EU) 2021/914”
DPA, evernote.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“At the end of the provision of the Evernote Enterprise Service, upon Customer's written request, Processor will delete or return all Customer Personal Data.”
DPA, evernote.com ↗
Audit rights: Once a year

“Customer may not audit Processor more than once in any twelve-month period.”
DPA, evernote.com ↗

Documents we track for Evernote

DPA: checked November 3, 2026 evernote.com ↗
Privacy policy: checked November 3, 2026 evernote.com ↗
Subprocessor list: checked November 3, 2026 evernote.com ↗
Terms of service: checked November 3, 2026 changed October 6, 2026 evernote.com ↗

Change history

October 6, 2026

Terms of service changed

Evernote added a new introductory section titled "3 Laws of Data Protection" at the top of the Terms of Service page, stating that notes are private by default, that Evernote does not train AI on customer content, and that notes can be exported anytime.
October 2, 2026

AI terms changed

Evernote now says it does not train AI models on customer data (before, its documents did not say).
October 2, 2026

Terms of service changed

Evernote has substantially rewritten its Terms of Service, splitting them into a US/Rest-of-World version and a separate version for EEA/UK/Swiss residents, consolidating the contracting entity to just "Bending Spoons" (removing Bending Spoons US Inc., Evernote do Brasil, and Bending Spoons Operations S.p.A. as separate parties), adding a new clause on AI-powered features and agents, and changing the arbitration opt-out window from a fixed 30-day period after acceptance to 30 days after first use following any introduction or update of the arbitration agreement.

Tracking since October 20, 2026. Every change links to the two versions of the document it came from. All vendors' changes →

Evernote subprocessors FAQ

How many subprocessors does Evernote use?: Evernote lists 11 subprocessors on its published list, including Bird, Calendly, Datadog, Fastly, and Google Cloud and 6 more.
Where does Evernote process customer data?: The subprocessors named by Evernote are located in United States and Ireland, as stated on its list.
How quickly does Evernote report a personal data breach to customers?: According to its DPA, Evernote reports a personal data breach to customers without undue delay, with no set deadline: “Processor will notify Customer without undue delay after becoming aware of a Personal Data Breach.”
How does Evernote transfer personal data outside the EU?: Evernote's DPA relies on standard contractual clauses: “to adopt the guarantees required by the GDPR, including the Standard Contractual Clauses of the European Commission Implementing Decision (EU) 2021/914”
When was Evernote's subprocessor list last checked?: ClauseTrail last checked Evernote's subprocessor list on November 3, 2026. Lists are re-checked daily.
How do I find out when Evernote adds or removes a subprocessor?: ClauseTrail monitors Evernote's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.