GoCardless Subprocessors List (October 2026): Changes and History
GoCardless names 25 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
GoCardless subprocessors (October 2026)
| # | Subprocessor | Purpose | Location | Data |
|---|---|---|---|---|
| 1 | Supplier | Type | Service | Location |
| 2 | IT | Google Cloud Platform, other | Netherlands | |
| 3 | Cloudflare | IT | Optimisation, protection of the United States | Merchants and payers |
| 4 | Services | IT | File storage, scale computing | EU-West region |
| 5 | Segment | IT | analytics | United States |
| 6 | GitHub | IT | Software development | United States |
| 7 | Okta | IT | merchant authentication (2FA) | United States |
| 8 | Looker | Business | Data platform, analytics | United States |
| 9 | Form3 | Payment | Direct Debit scheme provider | United Kingdom |
| 10 | Finastra Limited | processing | software (Bacs) | United Kingdom |
| 11 | Wise | Payment | FX services | United Kingdom |
| 12 | Mastercard | Payment | Payment scheme operator | — |
| 13 | Payment Services | processing | chargeback processing | Denmark |
| 14 | Vonage | Support | Support telephony service | United Kingdom |
| 15 | Zendesk | Support | Support ticketing software | United States |
| 16 | Pure JAM | Support | Support telephony service | United Kingdom |
| 17 | SendGrid | Comms | Sending transactional emails | United States |
| 18 | Braze | Comms | Sending operational emails | United States |
| 19 | LexisNexis Risk | Compliance | Background, AML checks, fraud | United States |
| 20 | Trulioo | Compliance | Identity verification | Canada |
| 21 | Onfido | Compliance | Identity verification | United Kingdom |
| 22 | Provenir | Credit | Credit decisioning | United States |
| 23 | Bradstreet | Credit | identity verification | United Kingdom |
| 24 | Flagright | Compliance | Payment screening, monitoring | United Kingdom |
| 25 | Celigo | NetSuite integration | Germany | Merchants and payers |
Get an email when GoCardless changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Certifications at GoCardless
What GoCardless's trust page lists, with the text each one comes from.
- ISO 27001
-
Active
“ISO27001 certified since 2016”
Trust page, gocardless.com ↗
Documents we track for GoCardless
- Privacy policy
- checked October 4, 2026 gocardless.com ↗
- Subprocessor list
- checked October 4, 2026 changed October 4, 2026 assets.ctfassets.net ↗
- Trust page
- checked October 4, 2026 gocardless.com ↗
Change history
Tracking since October 4, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
GoCardless subprocessors FAQ
- How many subprocessors does GoCardless use?
- GoCardless lists 25 subprocessors on its published list, including Supplier, Google, Cloudflare, Services, and Segment and 20 more.
- Where does GoCardless process customer data?
- The subprocessors named by GoCardless are located in Identity verification, Support telephony service, analytics, AML checks, Background, and Credit decisioning and 23 other locations, as stated on its list.
- Which security certifications does GoCardless list?
- GoCardless's trust page lists ISO 27001.
- When was GoCardless's subprocessor list last checked?
- ClauseTrail last checked GoCardless's subprocessor list on October 4, 2026 and last saw it change on October 4, 2026. Lists are re-checked daily.
- How do I find out when GoCardless adds or removes a subprocessor?
- ClauseTrail monitors GoCardless's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.