How many subprocessors does Legit Security use?

Legit Security lists 9 subprocessors on its published list, including AWS, Azure, Coralogix, FullStory, and Legit Security and 4 more.

Where does Legit Security process customer data?

The subprocessors named by Legit Security are located in US, as stated on its list.

Does Legit Security have a SOC 2 Type II report?

Yes. Legit Security's trust page lists a SOC 2 Type II report: “SOC 2 Type II”

Which security certifications does Legit Security list?

Legit Security's trust page lists SOC 2 Type II and ISO 27001.

When was Legit Security's subprocessor list last checked?

ClauseTrail last checked Legit Security's subprocessor list on November 2, 2026. Lists are re-checked daily.

How do I find out when Legit Security adds or removes a subprocessor?

ClauseTrail monitors Legit Security's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Legit Security Subprocessors List (November 2026): Changes and History

Legit Security names 9 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 2, 2026 Official source ↗

Legit Security subprocessors (November 2026)

#	Subprocessor	Purpose	Location
1	AWS	Cloud service provider	US
2	Azure	Cloud service provider	US
3	Coralogix	Logging service	US
4	FullStory	Digital experience analytics platform for session replay and behavior tracking.	US
5	Legit Security	ASPM platform	US
6	ReadMe	Documentation	US
7	SendGrid	Automatic email sending	US
8	Sentry	Monitoring and observability	—
9	Zendesk	Customer service platform with ticketing, chat, and help center.	US

Get an email when Legit Security changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Legit Security free

Certifications at Legit Security

What Legit Security's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“SOC 2 Type II”
Trust page, trust.legitsecurity.com ↗
ISO 27001: Active

“ISO 27001:2022”
Trust page, trust.legitsecurity.com ↗

Documents we track for Legit Security

Privacy policy: checked November 3, 2026 www.legitsecurity.com ↗
Subprocessor list: checked November 2, 2026 trust.legitsecurity.com ↗
Terms of service: checked November 3, 2026 www.legitsecurity.com ↗
Trust page: checked November 3, 2026 trust.legitsecurity.com ↗

Change history

Tracking since October 13, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Legit Security subprocessors FAQ

How many subprocessors does Legit Security use?: Legit Security lists 9 subprocessors on its published list, including AWS, Azure, Coralogix, FullStory, and Legit Security and 4 more.
Where does Legit Security process customer data?: The subprocessors named by Legit Security are located in US, as stated on its list.
Does Legit Security have a SOC 2 Type II report?: Yes. Legit Security's trust page lists a SOC 2 Type II report: “SOC 2 Type II”
Which security certifications does Legit Security list?: Legit Security's trust page lists SOC 2 Type II and ISO 27001.
When was Legit Security's subprocessor list last checked?: ClauseTrail last checked Legit Security's subprocessor list on November 2, 2026. Lists are re-checked daily.
How do I find out when Legit Security adds or removes a subprocessor?: ClauseTrail monitors Legit Security's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.