How many subprocessors does FusionAuth use?

FusionAuth lists 1 subprocessor on its published list, including Amazon Web Services (AWS).

Where does FusionAuth process customer data?

The subprocessors named by FusionAuth are located in Worldwide, as stated on its list.

Which security certifications does FusionAuth list?

FusionAuth's trust page lists ISO 27001, HIPAA, and PCI DSS.

When was FusionAuth's subprocessor list last checked?

ClauseTrail last checked FusionAuth's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when FusionAuth adds or removes a subprocessor?

ClauseTrail monitors FusionAuth's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

FusionAuth Subprocessors List (September 2026): Changes and History

FusionAuth names 1 subprocessor on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

FusionAuth subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services (AWS)	—	Worldwide

Get an email when FusionAuth changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track FusionAuth free

Certifications at FusionAuth

What FusionAuth's trust page lists, with the text each one comes from.

ISO 27001: Active

“fusionauth ISO 27001 certified”
Trust page, fusionauth.io ↗
HIPAA: Active

“fusionauth secure and compliant with soc2, hipaa, pci dss, coppa, gdpr”
Trust page, fusionauth.io ↗
PCI DSS: Active

“fusionauth secure and compliant with soc2, hipaa, pci dss, coppa, gdpr”
Trust page, fusionauth.io ↗

Documents we track for FusionAuth

DPA: checked September 28, 2026 trust.fusionauth.io ↗
Privacy policy: checked September 28, 2026 fusionauth.io ↗
Subprocessor list: checked September 28, 2026 trust.fusionauth.io ↗
Terms of service: checked September 28, 2026 trust.fusionauth.io ↗
Trust page: checked September 28, 2026 fusionauth.io ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

FusionAuth subprocessors FAQ

How many subprocessors does FusionAuth use?: FusionAuth lists 1 subprocessor on its published list, including Amazon Web Services (AWS).
Where does FusionAuth process customer data?: The subprocessors named by FusionAuth are located in Worldwide, as stated on its list.
Which security certifications does FusionAuth list?: FusionAuth's trust page lists ISO 27001, HIPAA, and PCI DSS.
When was FusionAuth's subprocessor list last checked?: ClauseTrail last checked FusionAuth's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when FusionAuth adds or removes a subprocessor?: ClauseTrail monitors FusionAuth's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.