How many subprocessors does Intercom use?

Intercom lists 14 subprocessors on its published list, including Amazon Web Services, Inc., Snowflake Inc., Mailgun Technologies, L.L.C., Message Systems, Inc. (d/b/a Sparkpost), and Twilio, Inc. and 9 more.

Where does Intercom process customer data?

The subprocessors named by Intercom are located in USA, as stated on its list.

How quickly does Intercom report a personal data breach to customers?

According to its DPA, Intercom reports a personal data breach to customers without undue delay, with no set deadline: “Intercom shall notify Customer without undue delay and shall provide such information as Customer may reasonably require”

How much notice does Intercom give before adding a subprocessor?

Intercom's DPA gives 20 days' notice of a new subprocessor, the time customers have to object: “Intercom will notify Customer if it intends to add or replace Sub-processors from the Sub-Processor Page at least twenty (20) days prior to any such changes.”

How does Intercom transfer personal data outside the EU?

Intercom's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “the parties rely on Intercom's certification under the EU-U.S Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK-US Data Privacy Framework (together, the "DPF") operated by the U.S. Department of Commerce.”

Which security certifications does Intercom list?

Intercom's trust page lists ISO 27001, ISO 27701, and ISO 42001.

When was Intercom's subprocessor list last checked?

ClauseTrail last checked Intercom's subprocessor list on October 1, 2026. Lists are re-checked daily.

How do I find out when Intercom adds or removes a subprocessor?

ClauseTrail monitors Intercom's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Intercom Subprocessors List (October 2026): Changes and History

Intercom names 14 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked October 1, 2026 Official source ↗

Intercom subprocessors (October 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services, Inc.	Hosting, storage and processing (including AI processing) of Customer Data (USA).	—
2	Snowflake Inc.	Data warehouse services and processing (including AI processing) (USA).	—
3	Mailgun Technologies, L.L.C.	Email delivery services for individual emails and bulk email campaigns initiated from Intercom's services (USA).	—
4	Message Systems, Inc. (d/b/a Sparkpost)	Email delivery services for individual emails and bulk email campaigns initiated from Intercom's services (USA).	—
5	Twilio, Inc.	SMS and Phone functionality (USA).	—
6	Cloudflare, Inc.	Transport Layer Security ("TLS") protection for customers using a custom domain to host their Intercom Articles (USA).	—
7	OpenAI, L.L.C.	AI processing (USA).	—
8	PlanetScale Inc.	Database storage and caching (USA).	—
9	Anthropic, PBC	AI processing (USA).	—
10	Google L.L.C.	AI processing (USA).	—
11	Microsoft Corporation	AI processing	USA
12	Eleven Labs, Inc.	AI processing (text to speech)	USA
13	Ably Realtime Ltd.	message delivery service to support real-time delivery of messages via messenger products	USA
14	Cartesia AI, Inc.	AI processing (text to speech)	USA

Get an email when Intercom changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Intercom free

Key DPA terms at Intercom

What Intercom's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Intercom shall notify Customer without undue delay and shall provide such information as Customer may reasonably require”
DPA, www.intercom.com ↗
Notice of a new subprocessor: 20 days ahead

“Intercom will notify Customer if it intends to add or replace Sub-processors from the Sub-Processor Page at least twenty (20) days prior to any such changes.”
DPA, www.intercom.com ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“the parties rely on Intercom's certification under the EU-U.S Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK-US Data Privacy Framework (together, the "DPF") operated by the U.S. Department of Commerce.”

“In relation to transfers of Customer Personal Data that is protected by the GDPR, the EU SCCs shall apply, completed as follows:”
DPA, www.intercom.com ↗
Customer data after the contract ends: Deleted within 180 days of the contract ending

“If Customer does not request deletion of Customer Personal Data, Intercom will automatically delete it from our systems 180 days after the termination or expiration of this Agreement.”
DPA, www.intercom.com ↗
Audit rights: Once a year

“may only be performed a maximum of once annually and will be restricted to only data relevant to Customer”
DPA, www.intercom.com ↗

Certifications at Intercom

What Intercom's trust page lists, with the text each one comes from.

ISO 27001: Active

“AICPA SOC 2 and ISO 27001 certification badges”
Trust page, www.intercom.com ↗
ISO 27701: Active

“ISO 27701, GDPR, and CCPA certification badges”
Trust page, www.intercom.com ↗
ISO 42001: Active

“ISO 42001 and AIUC-1 certification badges”
Trust page, www.intercom.com ↗

Documents we track for Intercom

DPA: checked September 30, 2026 www.intercom.com ↗
Privacy policy: checked September 30, 2026 www.intercom.com ↗
Subprocessor list: checked October 1, 2026 www.intercom.com ↗
Terms of service: checked September 30, 2026 www.intercom.com ↗
Trust page: checked October 1, 2026 www.intercom.com ↗

Change history

Tracking since October 1, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Intercom subprocessors FAQ

How many subprocessors does Intercom use?: Intercom lists 14 subprocessors on its published list, including Amazon Web Services, Inc., Snowflake Inc., Mailgun Technologies, L.L.C., Message Systems, Inc. (d/b/a Sparkpost), and Twilio, Inc. and 9 more.
Where does Intercom process customer data?: The subprocessors named by Intercom are located in USA, as stated on its list.
How quickly does Intercom report a personal data breach to customers?: According to its DPA, Intercom reports a personal data breach to customers without undue delay, with no set deadline: “Intercom shall notify Customer without undue delay and shall provide such information as Customer may reasonably require”
How much notice does Intercom give before adding a subprocessor?: Intercom's DPA gives 20 days' notice of a new subprocessor, the time customers have to object: “Intercom will notify Customer if it intends to add or replace Sub-processors from the Sub-Processor Page at least twenty (20) days prior to any such changes.”
How does Intercom transfer personal data outside the EU?: Intercom's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “the parties rely on Intercom's certification under the EU-U.S Data Privacy Framework, the Swiss-US Data Privacy Framework and the UK-US Data Privacy Framework (together, the "DPF") operated by the U.S. Department of Commerce.”
Which security certifications does Intercom list?: Intercom's trust page lists ISO 27001, ISO 27701, and ISO 42001.
When was Intercom's subprocessor list last checked?: ClauseTrail last checked Intercom's subprocessor list on October 1, 2026. Lists are re-checked daily.
How do I find out when Intercom adds or removes a subprocessor?: ClauseTrail monitors Intercom's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.