Modal Subprocessors List (October 2026): Changes and History
Modal names 26 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Modal subprocessors (October 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Amazon Web Services | Cloud hosting provider | Global |
| 2 | Google Cloud Platform | Cloud hosting provider | Global |
| 3 | Microsoft Azure | Cloud hosting provider | Global |
| 4 | Oracle Cloud | Cloud hosting provider | Global |
| 5 | Andromeda Cluster, Inc. | Cloud hosting provider | US |
| 6 | Cirrascale Cloud Services LLC | Cloud hosting provider | US |
| 7 | Cloudflare, Inc | Cloud hosting provider | US |
| 8 | The Constant Company, LLC (Vultr) | Cloud hosting provider | US |
| 9 | Crusoe Energy Systems LLC | Cloud hosting provider | Global |
| 10 | Civo Limited | Cloud hosting provider | Global |
| 11 | G-Core Labs S.A. | Cloud hosting provider | Global |
| 12 | Hyperbolic Labs, Inc. | Cloud hosting provider | Global |
| 13 | Lambda Labs | Cloud hosting provider | Global |
| 14 | Massed Compute Inc. | Cloud hosting provider | US |
| 15 | Megaport Limited | Cloud hosting provider | US |
| 16 | Nebius Inc. | Cloud hosting provider | Global |
| 17 | NexGen Cloud Limited | Cloud hosting provider | Global |
| 18 | ORNN AI INC. | Cloud hosting provider | Global |
| 19 | PhoenixNAP, LLC | Cloud hosting provider | US |
| 20 | Rackdog, LLC | Cloud hosting provider | US |
| 21 | San Francisco Compute Company | Cloud hosting provider | Global |
| 22 | Verda Cloud Oy | Cloud hosting provider | EU |
| 23 | Clickhouse, Inc | Logging service | US |
| 24 | Datadog | Cloud monitoring | US |
| 25 | Hex Technologies, Inc. | Data analytics | US |
| 26 | Snowflake Inc. | Data warehouse | US |
Get an email when Modal changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
AI and customer data at Modal
What Modal's own documents say, with the sentence each answer comes from.
- Trains AI models on customer data
-
Yes, unless you opt out
“Modal will not, except with Customer's prior written consent: (i) train any AI model using Customer Data, or (ii) export Customer Data into, or cause Customer Data to be ingested by, large language models.”
Terms of service, modal.com ↗ - Sends customer data to AI model providers
-
Yes
“Subcontractors that process Customer Data to provide AI Tools are identified on Modal's Subprocessor list, as further described in the Data Processing Addendum.”
Terms of service, modal.com ↗ - How to opt out
-
AI training or export of Customer Data into LLMs only occurs with the customer's prior written consent.
“Modal will not, except with Customer's prior written consent: (i) train any AI model using Customer Data, or (ii) export Customer Data into, or cause Customer Data to be ingested by, large language models.”
Terms of service, modal.com ↗ - How long AI features keep data
-
Customer Data, including AI Input and Output, is expunged promptly after processing is complete.
“Customer Data processed by the Service is expunged promptly following completion of processing, as described at https://modal.com/docs/guide/security#data-privacy.”
Terms of service, modal.com ↗
Key DPA terms at Modal
What Modal's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?
- Breach notification
-
Without undue delay, with no set deadline
“Processor shall notify Customer without undue delay upon Processor becoming aware of a Personal Data Breach affecting Customer Personal Data”
DPA, modal.com ↗ - Transfers outside the EU
-
Standard contractual clauses and adequacy decisions
“the Standard Contractual Clauses as incorporated herein pursuant to Appendix 1”
“an adequacy decision by applicable authorities”
DPA, modal.com ↗ - Customer data after the contract ends
-
Deleted or returned when the contract ends
“On termination of the Agreement, Modal will delete and procure the deletion of all copies of Customer Personal Data as described in the MSA.”
DPA, modal.com ↗ - Audit rights
-
Through certifications and audit reports only
“Processor shall make available to Customer information regarding Processor's compliance with the obligations set forth in this DPA in the form of a copy of Processor's then most recent third-party audits or certifications”
DPA, modal.com ↗
Documents we track for Modal
- DPA
- checked October 4, 2026 changed October 2, 2026 modal.com ↗
- Privacy policy
- checked October 4, 2026 changed October 2, 2026 modal.com ↗
- Subprocessor list
- checked October 5, 2026 trust.modal.com ↗
- Terms of service
- checked October 4, 2026 changed October 2, 2026 modal.com ↗
- Trust page
- trust.modal.com ↗
Change history
Tracking since October 5, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Modal subprocessors FAQ
- How many subprocessors does Modal use?
- Modal lists 26 subprocessors on its published list, including Amazon Web Services, Google Cloud Platform, Microsoft Azure, Oracle Cloud, and Andromeda Cluster, Inc. and 21 more.
- Where does Modal process customer data?
- The subprocessors named by Modal are located in Global, US, and EU, as stated on its list.
- Does Modal use customer data to train AI models?
- According to its terms of service, Modal uses customer data to train AI models unless customers opt out: “Modal will not, except with Customer's prior written consent: (i) train any AI model using Customer Data, or (ii) export Customer Data into, or cause Customer Data to be ingested by, large language models.”
- How quickly does Modal report a personal data breach to customers?
- According to its DPA, Modal reports a personal data breach to customers without undue delay, with no set deadline: “Processor shall notify Customer without undue delay upon Processor becoming aware of a Personal Data Breach affecting Customer Personal Data”
- How does Modal transfer personal data outside the EU?
- Modal's DPA relies on standard contractual clauses and adequacy decisions: “the Standard Contractual Clauses as incorporated herein pursuant to Appendix 1”
- When was Modal's subprocessor list last checked?
- ClauseTrail last checked Modal's subprocessor list on October 5, 2026. Lists are re-checked daily.
- How do I find out when Modal adds or removes a subprocessor?
- ClauseTrail monitors Modal's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.