How many subprocessors does Manatal use?

Manatal lists 34 subprocessors on its published list, including Atatus, Aircall, Amazon Web Services (AWS), APIDeck, and BrightData and 29 more.

Where does Manatal process customer data?

The subprocessors named by Manatal are located in US, EU, Global, and Thailand, as stated on its list.

How quickly does Manatal report a personal data breach to customers?

According to its DPA, Manatal reports a personal data breach to customers within 72 hours: “Manatal will notify Customer without undue delay, and in any event within seventy-two (72) hours, after becoming aware of a confirmed Security Incident.”

How much notice does Manatal give before adding a subprocessor?

Manatal's DPA gives 7 days' notice of a new subprocessor, the time customers have to object: “Customer may object to a new or replacement Subprocessor on reasonable data-protection-specific grounds by providing written notice within seven (7) days after receiving Manatal's notice.”

How does Manatal transfer personal data outside the EU?

Manatal's DPA relies on standard contractual clauses and adequacy decisions: “the Standard Contractual Clauses adopted under Commission Implementing Decision (EU) 2021/914 ("EU SCCs") are incorporated into this DPA and shall apply to the transfer.”

Does Manatal have a SOC 2 Type II report?

Yes. Manatal's trust page lists a SOC 2 Type II report: “Manatal is SOC 2 Type II certified, verified by a top third-party auditor.”

Which security certifications does Manatal list?

Manatal's trust page lists SOC 2 Type II.

When was Manatal's subprocessor list last checked?

ClauseTrail last checked Manatal's subprocessor list on November 3, 2026. Lists are re-checked daily.

How do I find out when Manatal adds or removes a subprocessor?

ClauseTrail monitors Manatal's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Manatal Subprocessors List (November 2026): Changes and History

Manatal names 34 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 3, 2026 Official source ↗

Manatal subprocessors (November 2026)

#	Subprocessor	Purpose	Location
1	Atatus	Performance and error monitoring	Global
2	Aircall	Voice call and call recording system for customer communication	EU, US
3	Amazon Web Services (AWS)	Cloud hosting and storage infrastructure	US
4	APIDeck	Unified API platform for integrations	EU, US
5	BrightData	Web data enrichment	Global
6	Calendly	Meeting scheduling	US, EU
7	Chartmogul	Subscription analytics	EU
8	Cloudflare	CDN, DDoS protection, and edge caching	Global
9	Datadog	Infrastructure and performance monitoring	Global
10	FeatureOS	Customer feedback and feature requests	US
11	Google Analytics	Website analytics	EU
12	Google Cloud Platform	Leverage Gemini LLM for AI features	US
13	Google Workspace	Business communication and document storage	Global
14	Hubspot	CRM and marketing automation	US, EU
15	Intercom	Customer support and chat platform	EU, US
16	Livestorm	Webinar and event hosting	EU
17	Mailgun	Transactional email delivery	US, EU
18	MongoDB	Database platform for customer and application data	US
19	Persona	Identity verification (KYC)	US
20	Retool	Internal admin dashboard platform	US, EU
21	Rewardful	Affiliate and referral tracking	US
22	RocketReach	Lead enrichment and contact lookup for sales/marketing outreach	US
23	Rupt.dev	Account sharing prevention and monitoring.	EU, US
24	SatisMeter	NPS and feedback surveys	EU
25	Segment	Analytics and user tracking	EU
26	Sendgrid	Email delivery and notifications	US
27	Sentry	Application error tracking	US, EU
28	Slack	Team communication and limited customer data sharing	US, EU
29	Stripe	Payment processing and billing	Global
30	Twilio	SMS message delivery, and Communication infrastructure	US, EU
31	Userguiding	In-app product onboarding	EU, US
32	Vanta	Security and compliance automation	US
33	Vizzly	Data visualization and analytics	EU
34	Manatal Co., Ltd.	Restricted remote operational and engineering access by authorised personnel on a need-to-know basis, where necessary for service operation, maintenance, security and support. Customer Personal Data is not routinely hosted or stored in Thailand.	Thailand

Get an email when Manatal changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Manatal free

Key DPA terms at Manatal

What Manatal's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 72 hours

“Manatal will notify Customer without undue delay, and in any event within seventy-two (72) hours, after becoming aware of a confirmed Security Incident.”
DPA, www.manatal.com ↗
Notice of a new subprocessor: 7 days ahead

“Customer may object to a new or replacement Subprocessor on reasonable data-protection-specific grounds by providing written notice within seven (7) days after receiving Manatal's notice.”
DPA, www.manatal.com ↗
Transfers outside the EU: Standard contractual clauses and adequacy decisions

“the Standard Contractual Clauses adopted under Commission Implementing Decision (EU) 2021/914 ("EU SCCs") are incorporated into this DPA and shall apply to the transfer.”

“that is not covered by an applicable adequacy decision of the European Commission, the Standard Contractual Clauses adopted under Commission Implementing Decision (EU) 2021/914 ("EU SCCs") are incorporated into this DPA and shall apply to the transfer.”
DPA, www.manatal.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Upon termination or expiration of the Agreement, Manatal shall, at the choice and expense of the Customer, delete or return all Personal Data in its possession, custody, or control, unless applicable law requires the continued storage of the Personal Data.”
DPA, www.manatal.com ↗
Audit rights: Through certifications and audit reports only

“Customer may request a third-party security certification or audit report (SOC 2 Type 2) held by Manatal.”
DPA, www.manatal.com ↗

Certifications at Manatal

What Manatal's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“Manatal is SOC 2 Type II certified, verified by a top third-party auditor.”
Trust page, www.manatal.com ↗

Documents we track for Manatal

AI terms: checked November 3, 2026 www.manatal.com ↗
DPA: checked November 3, 2026 www.manatal.com ↗
Privacy policy: checked November 3, 2026 www.manatal.com ↗
Subprocessor list: checked November 3, 2026 app.notion.com ↗
Terms of service: checked November 3, 2026 www.manatal.com ↗
Trust page: checked November 3, 2026 www.manatal.com ↗

Change history

Tracking since October 24, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Manatal subprocessors FAQ

How many subprocessors does Manatal use?: Manatal lists 34 subprocessors on its published list, including Atatus, Aircall, Amazon Web Services (AWS), APIDeck, and BrightData and 29 more.
Where does Manatal process customer data?: The subprocessors named by Manatal are located in US, EU, Global, and Thailand, as stated on its list.
How quickly does Manatal report a personal data breach to customers?: According to its DPA, Manatal reports a personal data breach to customers within 72 hours: “Manatal will notify Customer without undue delay, and in any event within seventy-two (72) hours, after becoming aware of a confirmed Security Incident.”
How much notice does Manatal give before adding a subprocessor?: Manatal's DPA gives 7 days' notice of a new subprocessor, the time customers have to object: “Customer may object to a new or replacement Subprocessor on reasonable data-protection-specific grounds by providing written notice within seven (7) days after receiving Manatal's notice.”
How does Manatal transfer personal data outside the EU?: Manatal's DPA relies on standard contractual clauses and adequacy decisions: “the Standard Contractual Clauses adopted under Commission Implementing Decision (EU) 2021/914 ("EU SCCs") are incorporated into this DPA and shall apply to the transfer.”
Does Manatal have a SOC 2 Type II report?: Yes. Manatal's trust page lists a SOC 2 Type II report: “Manatal is SOC 2 Type II certified, verified by a top third-party auditor.”
Which security certifications does Manatal list?: Manatal's trust page lists SOC 2 Type II.
When was Manatal's subprocessor list last checked?: ClauseTrail last checked Manatal's subprocessor list on November 3, 2026. Lists are re-checked daily.
How do I find out when Manatal adds or removes a subprocessor?: ClauseTrail monitors Manatal's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.