Instantly Subprocessors List (November 2026): Changes and History
Instantly names 27 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Instantly subprocessors (November 2026)
| # | Subprocessor | Purpose | Location | Data |
|---|---|---|---|---|
| 1 | Amazon Web Services | Cloud hosting and infrastructure services | United States | — |
| 2 | Cloudflare | Cloud monitoring | United States | — |
| 3 | Twilio Inc. | SMS and voice communication services | United States | — |
| 4 | Render | Application hosting services | United States | — |
| 5 | Intercom | Customer support messaging services | United States | — |
| 6 | Hetzner Online GmbH | Server hosting and infrastructure services | Germany | — |
| 7 | PlanetScale, Inc. | Managed database services | United States | — |
| 8 | Vercel | Application hosting and content delivery services | United States | — |
| 9 | Uploadcare, Inc. | File upload, storage and media processing services | United States | — |
| 10 | Pusher (Bird / MessageBird) | Real-time messaging services | United Kingdom | — |
| 11 | Cockroach Labs, Inc. | Data storage and processing | United States | — |
| 12 | Crunchy Data Solutions, Inc. | Managed PostgreSQL database services | United States | — |
| 13 | SingleStore, Inc. | Database and analytics services | United States | — |
| 14 | MongoDB Atlas (MongoDB, Inc.) | Database services | United States | — |
| 15 | Mezmo | Log management services | United States | — |
| 16 | Datadog | Infrastructure monitoring and log analysis services | United States | — |
| 17 | ElevenLabs, Inc. | AI voice generation | United States | — |
| 18 | OpenAI | Generative AI services | United States | — |
| 19 | Sentry | Application error monitoring services | United States | — |
| 20 | Axiom (Axiom, Inc.) | Log storage and analysis services | United States | — |
| 21 | GetEmails (RB2B) | Website visitor identification services | United States | Website visitor data |
| 22 | Google Gemini | Generative AI services | United States | — |
| 23 | Groq | AI inference services | United States | — |
| 24 | Nango | Third-party integration and connection management services | United States | — |
| 25 | Cerebras Systems | AI inference services | United States | — |
| 26 | Lucid Growth | Outbound email proxy infrastructure services | United States | — |
| 27 | Anthropic API - Product | Generative AI services | United States | — |
Get an email when Instantly changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Key DPA terms at Instantly
What Instantly's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?
- Breach notification
-
Without undue delay, with no set deadline
“Service Provider shall notify Subscriber without undue delay upon Service Provider's confirmation of a Personal Data Breach affecting Subscriber Personal Data.”
DPA, instantly.ai ↗ - Notice of a new subprocessor
-
15 days ahead
“Service Provider will notify Subscriber of the engagement (including the name and location of the relevant Sub-processor and the activities it will perform) by updating the Sub-processor Site or by other written means at least 15 days before such Sub-processor Processes Subscriber Personal Data.”
DPA, instantly.ai ↗ - Transfers outside the EU
-
Standard contractual clauses
“the Parties shall comply with their respective obligations set out in the EU SCCs”
DPA, instantly.ai ↗ - Customer data after the contract ends
-
Deleted within 30 days of the contract ending
“Within 30 days after the expiration or earlier termination of the Agreement, Service Provider shall, to the fullest extent technically possible in the circumstances, either (i) return and/or delete all Subscriber Personal Data in Service Provider's care, custody or control”
DPA, instantly.ai ↗ - Audit rights
-
Once a year
“on more than one occasion in any calendar year during the term of the Agreement, except for any additional audits that Subscriber is required to perform under Applicable Data Protection Laws”
DPA, instantly.ai ↗
Documents we track for Instantly
- DPA
- checked November 3, 2026 changed November 3, 2026 instantly.ai ↗
- Privacy policy
- checked November 3, 2026 changed November 3, 2026 instantly.ai ↗
- Subprocessor list
- checked November 2, 2026 trust.instantly.ai ↗
- Terms of service
- checked November 3, 2026 changed November 3, 2026 instantly.ai ↗
- Trust page
- checked November 3, 2026 changed October 30, 2026 trust.instantly.ai ↗
Change history
-
Terms of service changed
Instantly added a new defined term "Warmup Pool Information" and a new Section 4.8A imposing broad confidentiality restrictions on data Subscribers observe through the Email Warmup Service, backed by liquidated damages (greater of US $5,000 or 3x the prior 12 months' fees per breach), carve-outs from liability caps, a dedicated indemnity, and injunctive relief rights; it also corrected an internal cross-reference from "Section 4.8" to "Section 4.10" for account termination.
-
Privacy policy changed
A new sentence was added to the policy stating that participants in Instantly's email warmup service are contractually required to keep shared personal information confidential and may not use it for any purpose other than receiving the service; the remaining diff lines are only website navigation, footer, and product-menu text.
-
Privacy policy changed
A new "Right to Object" clause was added stating that EU and UK residents may object at any time to processing based on legitimate interests, including direct marketing, via an opt-out page or by contacting dpo@instantly.ai; the footer link "Don't Sell My Info" was also renamed "Your Privacy Choices".
Tracking since October 13, 2026. Every change links to the two versions of the document it came from. All vendors' changes →
Instantly subprocessors FAQ
- How many subprocessors does Instantly use?
- Instantly lists 27 subprocessors on its published list, including Amazon Web Services, Cloudflare, Twilio Inc., Render, and Intercom and 22 more.
- Where does Instantly process customer data?
- The subprocessors named by Instantly are located in United States, Germany, and United Kingdom, as stated on its list.
- How quickly does Instantly report a personal data breach to customers?
- According to its DPA, Instantly reports a personal data breach to customers without undue delay, with no set deadline: “Service Provider shall notify Subscriber without undue delay upon Service Provider's confirmation of a Personal Data Breach affecting Subscriber Personal Data.”
- How much notice does Instantly give before adding a subprocessor?
- Instantly's DPA gives 15 days' notice of a new subprocessor, the time customers have to object: “Service Provider will notify Subscriber of the engagement (including the name and location of the relevant Sub-processor and the activities it will perform) by updating the Sub-processor Site or by other written means at least 15 days before such Sub-processor Processes Subscriber Personal Data.”
- How does Instantly transfer personal data outside the EU?
- Instantly's DPA relies on standard contractual clauses: “the Parties shall comply with their respective obligations set out in the EU SCCs”
- When was Instantly's subprocessor list last checked?
- ClauseTrail last checked Instantly's subprocessor list on November 2, 2026. Lists are re-checked daily.
- How do I find out when Instantly adds or removes a subprocessor?
- ClauseTrail monitors Instantly's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.