How many subprocessors does H2O.ai use?

H2O.ai lists 10 subprocessors on its published list, including Amazon Web Services, Upwind Security, Coralogix, Okta, and Osano and 5 more.

Where does H2O.ai process customer data?

The subprocessors named by H2O.ai are located in US, US (AWS), and EU (AWS), as stated on its list.

Does H2O.ai use customer data to train AI models?

According to its DPA, H2O.ai uses customer data to train AI models unless customers opt out: “H2O.ai will not use Customer Data to train, retrain, fine-tune, or improve any artificial intelligence or machine learning models, except solely for Customer's benefit and only where expressly agreed in writing.”

How quickly does H2O.ai report a personal data breach to customers?

According to its DPA, H2O.ai reports a personal data breach to customers within 72 hours: “H2O.ai will notify Customer of a Personal Data Breach without undue delay and, where feasible, within 72 hours of becoming aware.”

How much notice does H2O.ai give before adding a subprocessor?

H2O.ai's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Customer may object to a new Subprocessor within thirty (30) days of such notice on reasonable data protection grounds.”

How does H2O.ai transfer personal data outside the EU?

H2O.ai's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions: “adequacy decisions (including, where applicable, the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. Data Privacy Framework);”

Which security certifications does H2O.ai list?

H2O.ai's trust page lists FedRAMP.

When was H2O.ai's subprocessor list last checked?

ClauseTrail last checked H2O.ai's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when H2O.ai adds or removes a subprocessor?

ClauseTrail monitors H2O.ai's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

H2O.ai Subprocessors List (September 2026): Changes and History

H2O.ai names 10 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

H2O.ai subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services	Cloud Infrastructure	—
2	Upwind Security	Cloud Security and Vulnerability Management	US
3	Coralogix	Logging and monitoring	EU (AWS)
4	Okta	User authentication services	US
5	Osano	Consent management and cookie compliance platform	—
6	Google Analytics	Product usage analytics	—
7	Auth0	User authentication services	—
8	Slack	Customer and internal communications.	—
9	FreshDesk	Customer support & ticketing	US (AWS)
10	monday.com	Project management and feature tracking	US (AWS)

Get an email when H2O.ai changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track H2O.ai free

AI and customer data at H2O.ai

What H2O.ai's own documents say, with the sentence each answer comes from.

Trains AI models on customer data: Yes, unless you opt out

“H2O.ai will not use Customer Data to train, retrain, fine-tune, or improve any artificial intelligence or machine learning models, except solely for Customer's benefit and only where expressly agreed in writing.”
DPA, h2o.ai ↗
Sends customer data to AI model providers: Yes

“H2O may use third-party artificial intelligence services (including large language models) to support and operate the Services.”
Privacy policy, h2o.ai ↗
How to opt out: Customer data is only used for AI model training if the customer expressly agrees to it in writing, and solely for that customer's benefit; otherwise no training occurs.

“H2O.ai will not use Customer Data to train, retrain, fine-tune, or improve any artificial intelligence or machine learning models, except solely for Customer's benefit and only where expressly agreed in writing.”
DPA, h2o.ai ↗

Key DPA terms at H2O.ai

What H2O.ai's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 72 hours

“H2O.ai will notify Customer of a Personal Data Breach without undue delay and, where feasible, within 72 hours of becoming aware.”
DPA, h2o.ai ↗
Notice of a new subprocessor: 30 days ahead

“Customer may object to a new Subprocessor within thirty (30) days of such notice on reasonable data protection grounds.”
DPA, h2o.ai ↗
Transfers outside the EU: Standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions

“adequacy decisions (including, where applicable, the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. Data Privacy Framework);”

“Transfers will rely on adequacy decisions where available, including the EU-U.S. Data Privacy Framework, and otherwise on the EU SCCs and UK Addendum as applicable.”

“the Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) ("EU SCCs"); and/or”
DPA, h2o.ai ↗
Customer data after the contract ends: Deleted within 30 days of the contract ending

“delete or return data within a reasonable period following termination (not to exceed 30 days) at Customer's choice and written request, unless (i) retention is required by applicable law or (ii) retention is reasonably necessary to establish, exercise, or defend legal claims.”
DPA, h2o.ai ↗
Audit rights: Once a year

“the audit is conducted no more than once annually, unless required by a Supervisory Authority or following a Personal Data Breach;”
DPA, h2o.ai ↗

Certifications at H2O.ai

What H2O.ai's trust page lists, with the text each one comes from.

FedRAMP: Active

“FedRAMP Marketplace”
Trust page, h2o.ai ↗

Documents we track for H2O.ai

DPA: checked September 28, 2026 h2o.ai ↗
Privacy policy: checked September 28, 2026 h2o.ai ↗
Subprocessor list: checked September 28, 2026 trust.h2o.ai ↗
Terms of service: checked September 28, 2026 h2o.ai ↗
Trust page: checked September 28, 2026 h2o.ai ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

H2O.ai subprocessors FAQ

How many subprocessors does H2O.ai use?: H2O.ai lists 10 subprocessors on its published list, including Amazon Web Services, Upwind Security, Coralogix, Okta, and Osano and 5 more.
Where does H2O.ai process customer data?: The subprocessors named by H2O.ai are located in US, US (AWS), and EU (AWS), as stated on its list.
Does H2O.ai use customer data to train AI models?: According to its DPA, H2O.ai uses customer data to train AI models unless customers opt out: “H2O.ai will not use Customer Data to train, retrain, fine-tune, or improve any artificial intelligence or machine learning models, except solely for Customer's benefit and only where expressly agreed in writing.”
How quickly does H2O.ai report a personal data breach to customers?: According to its DPA, H2O.ai reports a personal data breach to customers within 72 hours: “H2O.ai will notify Customer of a Personal Data Breach without undue delay and, where feasible, within 72 hours of becoming aware.”
How much notice does H2O.ai give before adding a subprocessor?: H2O.ai's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Customer may object to a new Subprocessor within thirty (30) days of such notice on reasonable data protection grounds.”
How does H2O.ai transfer personal data outside the EU?: H2O.ai's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions: “adequacy decisions (including, where applicable, the EU-U.S. Data Privacy Framework, UK Extension, and Swiss-U.S. Data Privacy Framework);”
Which security certifications does H2O.ai list?: H2O.ai's trust page lists FedRAMP.
When was H2O.ai's subprocessor list last checked?: ClauseTrail last checked H2O.ai's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when H2O.ai adds or removes a subprocessor?: ClauseTrail monitors H2O.ai's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.