How many subprocessors does Klaviyo use?

Klaviyo lists 34 subprocessors on its published list, including Ada Support, Inc., Amazon Web Services, Inc., Anthropic, PBC, Chronosphere, Inc., and ClickHouse, Inc and 29 more.

Where does Klaviyo process customer data?

The subprocessors named by Klaviyo are located in United States, Canada, Denmark, European Economic Area United States Other Locations as required⁴, Ireland, and Singapore and 4 other locations, as stated on its list.

How quickly does Klaviyo report a personal data breach to customers?

According to its DPA, Klaviyo reports a personal data breach to customers without undue delay, with no set deadline: “Klaviyo shall notify Customer in writing without undue delay after becoming aware of any Security Incident”

How much notice does Klaviyo give before adding a subprocessor?

Klaviyo's DPA gives 15 days' notice of a new subprocessor, the time customers have to object: “Klaviyo shall provide Customer with at least fifteen (15) days' notice of any proposed additions or replacements to the Sub-processors it uses to process Customer Personal Data.”

How does Klaviyo transfer personal data outside the EU?

Klaviyo's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “The Parties agree that the terms of the Standard Contractual Clauses Module Two (Controller to Processor) and Module Three (Processor to Processor), as further specified in Schedule 3 of this DPA, are hereby incorporated by reference”

When was Klaviyo's subprocessor list last checked?

ClauseTrail last checked Klaviyo's subprocessor list on September 26, 2026. Lists are re-checked daily.

How do I find out when Klaviyo adds or removes a subprocessor?

ClauseTrail monitors Klaviyo's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Klaviyo Subprocessors List (September 2026): Changes and History

Klaviyo names 34 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

Klaviyo subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Ada Support, Inc.	Customer Service Automation	United States
2	Amazon Web Services, Inc.	Cloud Hosting Provider	United States
3	Anthropic, PBC	AI Features and Functionality; Customer Success and Support Services	United States
4	Chronosphere, Inc.	Data Analysis	United States
5	ClickHouse, Inc	Database and Analytics Service (Real-Time Storage, Querying, and Reporting)	United States Germany²
6	Cloudflare, Inc.	Web Application Firewall	European Economic Area United States Other Locations as required⁴
7	Concentrix Solutions Corporation	Customer Support	United States
8	Dropbox, Inc.	File Hosting for Professional Services and Enablement	United States
9	Fivetran, Inc.	Automated Data Movement	United States
10	Functional Software, Inc. (d/b/a Sentry.io)	Error Logging	United States
11	Glean Technologies, Inc.	Customer Success and Support Services	United States
12	Infobip, Inc.	Communications Services	United States
13	Linear Orbit, Inc.	Project Management and Issue Tracking	United States
14	Loom, Inc. (Atlassian)	Call Recording Customer Support (Customer Optional)	United States
15	MaestroQA Inc.	Customer Support Quality Assurance	United States
16	Mailgun Technologies, Inc. (d/b/a Sinch Email)	Email Review and Analysis	United States
17	Meta, Inc.	WhatsApp Messaging	Denmark, Ireland, United States, Singapore, Sweden
18	Microsoft Corporation	Windows Virtual Desktops Cloud Infrastructure for Customer Support	United States
19	OpenAI, LLC	AI Features and functionality; Customer Success and Support Services	United States
20	Sendgrid, Inc.	Email Delivery	United States
21	SendSafely, Inc.	File Sharing Encryption Platform (Customer Optional)	United States
22	Slack Technologies, LLC	Slack Connect for Customer Success and Support Services; Customer-Facing Notification Integration	United States⁶ Australia Brazil Canada France Germany India Japan Singapore South Korea Sweden Switzerland United Arab Emirates United Kingdom Ireland South Africa
23	Snowflake, Inc.	Data Analysis	United States
24	Splunk, Inc.	Logging Tool	United States
25	Statsig, Inc.	Product Feature Management	United States
26	Twilio, Inc.	Communications Services	United States
27	Zendesk, Inc.	Customer Success and Support Services	United States Other Locations as Required⁷
28	Klaviyo Australia Pty Ltd	Services and Support	United States
29	Klaviyo Canada Inc.	Services and Support	Canada
30	Klaviyo France SAS	Services and Support	United States
31	Klaviyo Germany GmbH	Services and Support	United States
32	Klaviyo Ireland Limited	Services and Support	United States
33	Klaviyo Singapore Pte. Ltd.	Services and Support	United States
34	Klaviyo Ltd.	Services and Support	United States

Get an email when Klaviyo changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Klaviyo free

Key DPA terms at Klaviyo

What Klaviyo's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Klaviyo shall notify Customer in writing without undue delay after becoming aware of any Security Incident”
DPA, www.klaviyo.com ↗
Notice of a new subprocessor: 15 days ahead

“Klaviyo shall provide Customer with at least fifteen (15) days' notice of any proposed additions or replacements to the Sub-processors it uses to process Customer Personal Data.”
DPA, www.klaviyo.com ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“The Parties agree that the terms of the Standard Contractual Clauses Module Two (Controller to Processor) and Module Three (Processor to Processor), as further specified in Schedule 3 of this DPA, are hereby incorporated by reference”

“Klaviyo is self-certified under the DPF and complies with the data privacy principles thereunder.”
DPA, www.klaviyo.com ↗
Customer data after the contract ends: Deleted within 90 days of the contract ending

“within 90 days of account closure or expiry of the Agreement, delete and use all reasonable efforts to procure the deletion of all other copies of Customer Personal Data processed by Klaviyo or any Sub-processors”
DPA, www.klaviyo.com ↗
Audit rights: Once a year

“may audit Klaviyo's compliance with its obligations under this DPA up to once per year”
DPA, www.klaviyo.com ↗

Documents we track for Klaviyo

AI terms: checked September 26, 2026 trust.klaviyo.com ↗
DPA: checked September 26, 2026 www.klaviyo.com ↗
Privacy policy: checked September 26, 2026 privacy.klaviyo.com ↗
Subprocessor list: checked September 26, 2026 www.klaviyo.com ↗
Terms of service: checked September 26, 2026 www.klaviyo.com ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Klaviyo subprocessors FAQ

How many subprocessors does Klaviyo use?: Klaviyo lists 34 subprocessors on its published list, including Ada Support, Inc., Amazon Web Services, Inc., Anthropic, PBC, Chronosphere, Inc., and ClickHouse, Inc and 29 more.
Where does Klaviyo process customer data?: The subprocessors named by Klaviyo are located in United States, Canada, Denmark, European Economic Area United States Other Locations as required⁴, Ireland, and Singapore and 4 other locations, as stated on its list.
How quickly does Klaviyo report a personal data breach to customers?: According to its DPA, Klaviyo reports a personal data breach to customers without undue delay, with no set deadline: “Klaviyo shall notify Customer in writing without undue delay after becoming aware of any Security Incident”
How much notice does Klaviyo give before adding a subprocessor?: Klaviyo's DPA gives 15 days' notice of a new subprocessor, the time customers have to object: “Klaviyo shall provide Customer with at least fifteen (15) days' notice of any proposed additions or replacements to the Sub-processors it uses to process Customer Personal Data.”
How does Klaviyo transfer personal data outside the EU?: Klaviyo's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “The Parties agree that the terms of the Standard Contractual Clauses Module Two (Controller to Processor) and Module Three (Processor to Processor), as further specified in Schedule 3 of this DPA, are hereby incorporated by reference”
When was Klaviyo's subprocessor list last checked?: ClauseTrail last checked Klaviyo's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when Klaviyo adds or removes a subprocessor?: ClauseTrail monitors Klaviyo's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.