How many subprocessors does Hootsuite use?

Hootsuite lists 15 subprocessors on its published list, including Amazon Web Services, Inc., MongoDB, Inc., Ory Corp, Sumo Logic, Inc., and Twilio Inc. (formerly, Sendgrid, Inc.) and 10 more.

Where does Hootsuite process customer data?

The subprocessors named by Hootsuite are located in United States - Standard Contractual Clauses, United States - Data Privacy Framework, United States - Standard Contractual Clauses Europe, Canada - Adequacy, Europe (Germany), and Europe (Luxembourg) - see Talkwalker Services below and 1 other locations, as stated on its list.

Does Hootsuite use customer data to train AI models?

According to its AI terms, Hootsuite may use customer data to train AI models: “Customer agrees and instructs that we may use Customer Content and Outputs to develop and improve the features of the AI-Powered Services (including our machine-learning technologies), both during and after the term of the Agreement”

How quickly does Hootsuite report a personal data breach to customers?

According to its DPA, Hootsuite reports a personal data breach to customers without undue delay, with no set deadline: “Hootsuite will, without undue delay, notify Customer of the Security Incident.”

How much notice does Hootsuite give before adding a subprocessor?

Hootsuite's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Hootsuite shall provide thirty (30) days' notification of any intended new or replacement Subprocessor before authorizing such Subprocessor to Process Customer Personal Data in connection with the provision of the applicable Services.”

How does Hootsuite transfer personal data outside the EU?

Hootsuite's DPA relies on standard contractual clauses and adequacy decisions: “the SCCs shall be incorporated and form an integral part of this DPA, with Customer (and any Customer Affiliates) as the "data exporter" and Hootsuite Inc. as the "data importer"”

When was Hootsuite's subprocessor list last checked?

ClauseTrail last checked Hootsuite's subprocessor list on September 26, 2026. Lists are re-checked daily.

How do I find out when Hootsuite adds or removes a subprocessor?

ClauseTrail monitors Hootsuite's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Hootsuite Subprocessors List (September 2026): Changes and History

Hootsuite names 15 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

Hootsuite subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services, Inc.	Cloud Infrastructure and Storage	United States - Data Privacy Framework
2	MongoDB, Inc.	Database Services	United States - Standard Contractual Clauses
3	Ory Corp	Identity and Access Management	United States - Standard Contractual Clauses
4	Sumo Logic, Inc.	Log Management and Security Analytics	United States - Standard Contractual Clauses
5	Twilio Inc. (formerly, Sendgrid, Inc.)	In-App Email Delivery	United States - Data Privacy Framework
6	Talkwalker S.à r.l. (Hootsuite Affiliate)	Listening AI-Powered Services using Hootsuite AI	Europe (Luxembourg) - see Talkwalker Services below
7	Google Cloud Canada Corporation	AI Service Provider	United States - Data Privacy Framework
8	OpenAI, L.L.C.	AI Service Provider	United States - Standard Contractual Clauses
9	Microsoft Corporation	AI Service Provider	United States - Standard Contractual Clauses
10	Zendesk Sunshine Conversations Inc.	Messaging for certain private channels (WhatsApp, SMS, In-Web, etc.)	United States - Standard Contractual Clauses
11	Cloudflare, Inc.	Pixel Connector - Provides Domain Name System, reverse proxies, and cloud security services	United States - Data Privacy Framework Europe
12	Hetzner Online GmbH	Cloud Infrastructure and Storage	Europe (Germany)
13	Hootsuite Inc. (Talkwalker Affiliate)	AI Service Provider	Canada - Adequacy
14	Datadog Inc.	Monitoring of cloud-based infrastructure, applications, and logs	United States - Standard Contractual Clauses Europe
15	Elasticsearch Inc.	Data storage and querying, search hosting, performance of diagnostic measures, and troubleshooting	United States - Standard Contractual Clauses Europe

Get an email when Hootsuite changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Hootsuite free

AI and customer data at Hootsuite

What Hootsuite's own documents say, with the sentence each answer comes from.

Trains AI models on customer data: Yes

“Customer agrees and instructs that we may use Customer Content and Outputs to develop and improve the features of the AI-Powered Services (including our machine-learning technologies), both during and after the term of the Agreement”
AI terms, www.hootsuite.com ↗
Sends customer data to AI model providers: Yes

“you (a) permit us to submit Customer Content to an AI Service Provider; and (b) grant the AI Service Provider permission to access or otherwise process your Customer Content for the operation of the AI-Powered Service”
AI terms, www.hootsuite.com ↗
How to opt out: Not stated in the documents we track.

Key DPA terms at Hootsuite

What Hootsuite's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Hootsuite will, without undue delay, notify Customer of the Security Incident.”
DPA, www.hootsuite.com ↗
Notice of a new subprocessor: 30 days ahead

“Hootsuite shall provide thirty (30) days' notification of any intended new or replacement Subprocessor before authorizing such Subprocessor to Process Customer Personal Data in connection with the provision of the applicable Services.”
DPA, www.hootsuite.com ↗
Transfers outside the EU: Standard contractual clauses and adequacy decisions

“the SCCs shall be incorporated and form an integral part of this DPA, with Customer (and any Customer Affiliates) as the "data exporter" and Hootsuite Inc. as the "data importer"”

“Customer acknowledges that Hootsuite may Process Customer Personal Data in Canada, a jurisdiction recognized by the European Commission as providing an adequate level of protection for personal data.”
DPA, www.hootsuite.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Upon termination of the Services, Hootsuite shall, upon Customer's written request received by Hootsuite within 30 days of termination of the Services, return or delete all Customer Personal Data and copies of such data in its custody or control, unless it is legally required to retain the Customer Personal Data.”
DPA, www.hootsuite.com ↗
Audit rights: Through certifications and audit reports only

“Customer agrees that Hootsuite's audit reports and certifications will be used to satisfy any audit or inspection requests by Customer (or Customer's independent, third-party auditor), including for the purposes of meeting any audit obligations under Applicable Data Protection Laws or the SCCs, which Hootsuite will make available to Customer upon written request no more than once per year”
DPA, www.hootsuite.com ↗

Documents we track for Hootsuite

AI terms: checked September 26, 2026 www.hootsuite.com ↗
DPA: checked September 26, 2026 www.hootsuite.com ↗
Privacy policy: checked September 26, 2026 www.hootsuite.com ↗
Subprocessor list: checked September 26, 2026 www.hootsuite.com ↗
Terms of service: checked September 26, 2026 www.hootsuite.com ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Hootsuite subprocessors FAQ

How many subprocessors does Hootsuite use?: Hootsuite lists 15 subprocessors on its published list, including Amazon Web Services, Inc., MongoDB, Inc., Ory Corp, Sumo Logic, Inc., and Twilio Inc. (formerly, Sendgrid, Inc.) and 10 more.
Where does Hootsuite process customer data?: The subprocessors named by Hootsuite are located in United States - Standard Contractual Clauses, United States - Data Privacy Framework, United States - Standard Contractual Clauses Europe, Canada - Adequacy, Europe (Germany), and Europe (Luxembourg) - see Talkwalker Services below and 1 other locations, as stated on its list.
Does Hootsuite use customer data to train AI models?: According to its AI terms, Hootsuite may use customer data to train AI models: “Customer agrees and instructs that we may use Customer Content and Outputs to develop and improve the features of the AI-Powered Services (including our machine-learning technologies), both during and after the term of the Agreement”
How quickly does Hootsuite report a personal data breach to customers?: According to its DPA, Hootsuite reports a personal data breach to customers without undue delay, with no set deadline: “Hootsuite will, without undue delay, notify Customer of the Security Incident.”
How much notice does Hootsuite give before adding a subprocessor?: Hootsuite's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Hootsuite shall provide thirty (30) days' notification of any intended new or replacement Subprocessor before authorizing such Subprocessor to Process Customer Personal Data in connection with the provision of the applicable Services.”
How does Hootsuite transfer personal data outside the EU?: Hootsuite's DPA relies on standard contractual clauses and adequacy decisions: “the SCCs shall be incorporated and form an integral part of this DPA, with Customer (and any Customer Affiliates) as the "data exporter" and Hootsuite Inc. as the "data importer"”
When was Hootsuite's subprocessor list last checked?: ClauseTrail last checked Hootsuite's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when Hootsuite adds or removes a subprocessor?: ClauseTrail monitors Hootsuite's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.