How many subprocessors does Mailchimp use?

Mailchimp lists 25 subprocessors on its published list, including Akamai, Amazon, Amplitude, CodeScience, and E-Hawk and 20 more.

Where does Mailchimp process customer data?

The subprocessors named by Mailchimp are located in USA, California, Massachusetts, New York, Tennessee, and Washington and 12 other locations, as stated on its list.

How quickly does Mailchimp report a personal data breach to customers?

According to its DPA, Mailchimp reports a personal data breach to customers without undue delay, with no set deadline: “Upon becoming aware of a Security Incident, Mailchimp shall: (i) notify Customer without undue delay”

How much notice does Mailchimp give before adding a subprocessor?

Mailchimp's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Mailchimp shall notify Customer if it adds or removes Sub-processors at least 10 days prior to any such changes if Customer opts in to receive such email notifications by clicking here.”

How does Mailchimp transfer personal data outside the EU?

Mailchimp's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “Mailchimp will use the Data Privacy Framework to lawfully receive Customer Data in the United States and ensure that it provides at least the same level of protection to such Customer Data as is required by the Data Privacy Framework Principles”

When was Mailchimp's subprocessor list last checked?

ClauseTrail last checked Mailchimp's subprocessor list on September 26, 2026. Lists are re-checked daily.

How do I find out when Mailchimp adds or removes a subprocessor?

ClauseTrail monitors Mailchimp's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Mailchimp Subprocessors List (September 2026): Changes and History

Mailchimp names 25 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

Mailchimp subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Akamai	Improves application speed and security.	Massachusetts, USA
2	Amazon	Facilitates delivery and temporary storage.	Washington, USA
3	Amplitude	To better understand how customers use our product.	San Francisco, USA
4	CodeScience	Develops and maintains integrations.	Tennessee, USA
5	E-Hawk	Detects and prevents abuse.	New York, USA
6	El Camino	Detects and prevents abuse.	California, USA
7	Finc3	Develops and maintains integrations.	Hamburg, Germany
8	Fivetran	Data connection, centralization, and organization.	California, USA
9	Google	Bolsters internal operations and advertising, & website analytics.	California, USA
10	Infobip	To provide our SMS program.	London, United Kingdom
11	Looker	Business analytics software, centralization and organziation tool.	California, USA
12	Microsoft	To provide our AI features through Intuit Assist.	Washington, USA
13	OpenAI	To provide our AI features through Intuit Assist.	California, USA
14	Percona	To improve our relational database management system.	North Carolina, USA
15	R.R. Donnelley	Develops and implements certain Mailchimp multi-channel marketing products.	Illinois, USA
16	SC Wedis Company SRL	Develops and maintains integrations.	Tâgu Mureş, Romania
17	Slack	Communication and collaboration tool.	California, USA
18	SmartyStreets	Address verification for e-commerce offering.	Utah, USA
19	TaskUs	To provide some of our customer support.	USA, Greece
20	TaxJar	Tax service provider for e-commerce offering.	Massachusetts, USA
21	Twilio	To provide our SMS program.	California, USA
22	Two Bulls	Develops and maintains integrations.	New York, USA
23	Tyrannosaurus Tech	Develops and maintains integrations.	Georgia, USA
24	Vextras LLC	Develops and maintains integrations.	Tennessee, USA
25	Zendesk	To provide online chat and email support to our customers.	California, USA

Get an email when Mailchimp changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Mailchimp free

Key DPA terms at Mailchimp

What Mailchimp's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Upon becoming aware of a Security Incident, Mailchimp shall: (i) notify Customer without undue delay”
DPA, mailchimp.com ↗
Notice of a new subprocessor: 10 days ahead

“Mailchimp shall notify Customer if it adds or removes Sub-processors at least 10 days prior to any such changes if Customer opts in to receive such email notifications by clicking here.”
DPA, mailchimp.com ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“Mailchimp will use the Data Privacy Framework to lawfully receive Customer Data in the United States and ensure that it provides at least the same level of protection to such Customer Data as is required by the Data Privacy Framework Principles”

“the SCCs shall be incorporated into and form an integral part of this DPA”
DPA, mailchimp.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Upon termination or expiration of the Agreement, Mailchimp shall shall take reasonable measures to provide tools for Customer (at Customer's election) to delete or return to Customer all Customer Data (including copies) in its possession or control”
DPA, mailchimp.com ↗
Audit rights: On request

“Mailchimp shall make available to Customer all information reasonably necessary to demonstrate compliance with this DPA and allow for and contribute to audits, including inspections by Customer in order to assess compliance with this DPA.”
DPA, mailchimp.com ↗

Documents we track for Mailchimp

DPA: checked September 26, 2026 mailchimp.com ↗
Subprocessor list: checked September 26, 2026 mailchimp.com ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Mailchimp subprocessors FAQ

How many subprocessors does Mailchimp use?: Mailchimp lists 25 subprocessors on its published list, including Akamai, Amazon, Amplitude, CodeScience, and E-Hawk and 20 more.
Where does Mailchimp process customer data?: The subprocessors named by Mailchimp are located in USA, California, Massachusetts, New York, Tennessee, and Washington and 12 other locations, as stated on its list.
How quickly does Mailchimp report a personal data breach to customers?: According to its DPA, Mailchimp reports a personal data breach to customers without undue delay, with no set deadline: “Upon becoming aware of a Security Incident, Mailchimp shall: (i) notify Customer without undue delay”
How much notice does Mailchimp give before adding a subprocessor?: Mailchimp's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Mailchimp shall notify Customer if it adds or removes Sub-processors at least 10 days prior to any such changes if Customer opts in to receive such email notifications by clicking here.”
How does Mailchimp transfer personal data outside the EU?: Mailchimp's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “Mailchimp will use the Data Privacy Framework to lawfully receive Customer Data in the United States and ensure that it provides at least the same level of protection to such Customer Data as is required by the Data Privacy Framework Principles”
When was Mailchimp's subprocessor list last checked?: ClauseTrail last checked Mailchimp's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when Mailchimp adds or removes a subprocessor?: ClauseTrail monitors Mailchimp's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.