How many subprocessors does Netlify use?

Netlify lists 26 subprocessors on its published list, including Altinity, Inc / Clickhouse, Amazon Web Services (AWS), Amplitude, Inc., Anthropic, and Automattic, Inc. (Akismet) and 21 more.

Where does Netlify process customer data?

The subprocessors named by Netlify are located in US and Global, as stated on its list.

Does Netlify use customer data to train AI models?

According to its privacy policy, Netlify uses customer data to train AI models unless customers opt out: “We do not use your code or content to train AI models unless you explicitly opt in.”

Which security certifications does Netlify list?

Netlify's trust page lists ISO 27001, HIPAA, and PCI DSS.

When was Netlify's subprocessor list last checked?

ClauseTrail last checked Netlify's subprocessor list on October 2, 2026. Lists are re-checked daily.

How do I find out when Netlify adds or removes a subprocessor?

ClauseTrail monitors Netlify's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Netlify Subprocessors List (October 2026): Changes and History

Netlify names 26 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked October 2, 2026 Official source ↗

Netlify subprocessors (October 2026)

#	Subprocessor	Purpose	Location
1	Altinity, Inc / Clickhouse	Managed ClickHouse database services, including hosting, operation, and support of ClickHouse analytical databases.	US
2	Amazon Web Services (AWS)	Cloud infrastructure provider supplying AWS compute, storage, networking, and managed services used to host and run Netlify infrastructure.	US
3	Amplitude, Inc.	Product analytics platform used to track user behavior, measure feature adoption, and analyze product engagement.	US
4	Anthropic	Provider of large language models (Claude) and related AI services, accessed via API for AI-enabled features and workflows.	US
5	Automattic, Inc. (Akismet)	Automated spam-filtering service (Akismet) used to detect and filter spam in comment, form, and text submissions.	US
6	Axiom	Logging, tracing, and monitoring platform used to ingest, store, and query event data for observability and troubleshooting.	US
7	Crowdstrike, Inc. (Humio)	Log management and observability platform (Humio, now CrowdStrike Falcon LogScale) used for log ingestion, search, and security analytics.	US
8	Datadog, Inc.	Observability platform providing infrastructure and application monitoring, log management, and security monitoring.	US
9	Dynatrace DevCycle	Feature flag and feature management platform used to control feature releases, gradual rollouts, and experimentation.	US
10	Fivetran Inc.	Automated data movement platform providing ELT pipelines that replicate data from source systems into the data warehouse.	US
11	Google Cloud Platform GCP / Zencore Group, LLC	Google Cloud Platform infrastructure and managed services, with Zencore Group, LLC as the associated Google Cloud partner.	US
12	Kapa.AI	AI assistant trained on developer documentation that answers technical questions for developers and support teams.	US
13	Name.com	Domain name registrar used to register and manage company domain names.	US
14	Neon	Third-party provider for a Netlify Extension that lets users create a Postgres database on Netlify's account with Neon and later claim it for production use.	US
15	NS1	Managed DNS and traffic management service providing authoritative DNS and traffic steering.	Global, US
16	OpenAI	Provider of large language models (GPT family) and related AI services, accessed via API.	US
17	OpenRouter	AI services: model routing platform providing unified API access to large language models from multiple providers.	US
18	Orb	Usage-based billing platform used to meter usage, calculate charges, and generate invoices for usage-based pricing.	US
19	Salesforce, Inc.	Customer relationship management (CRM) platform used to manage accounts, contacts, opportunities, and the sales pipeline.	US
20	Segment	Customer data platform used to collect, route, and deliver analytics event data to downstream tools.	US
21	SendGrid	Cloud-based email delivery service used to send transactional and marketing emails.	US
22	Sigma Computing, Inc.	Cloud analytics and business intelligence platform used to explore and visualize data from the cloud data warehouse.	US
23	Smartbear Software, Inc / Bugsnag	Software quality platform providing testing and API quality tools (SmartBear) and application error monitoring (Bugsnag).	US
24	Snowflake, Inc.	Cloud data warehouse used to store, process, and analyze company data.	US
25	Stripe	Payment processing platform used to process customer credit card payments.	US
26	WorkOS, Inc.	Enterprise authentication platform providing SSO, directory sync, and related enterprise identity integrations.	US

Get an email when Netlify changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Netlify free

AI and customer data at Netlify

What Netlify's own documents say, with the sentence each answer comes from.

Trains AI models on customer data: Yes, unless you opt out

“We do not use your code or content to train AI models unless you explicitly opt in.”
Privacy policy, www.netlify.com ↗
Sends customer data to AI model providers: Not stated in the documents we track.
How to opt out: Customers must explicitly opt in before Netlify will use their code or content to train AI models.

“We do not use your code or content to train AI models unless you explicitly opt in.”
Privacy policy, www.netlify.com ↗

Certifications at Netlify

What Netlify's trust page lists, with the text each one comes from.

ISO 27001: Active

“Certified security ISO 27001 PCI DSS HIPAA SOC 2 ISO 27018 CCPA GDPR DORA”
Trust page, www.netlify.com ↗
HIPAA: Active

“Certified security ISO 27001 PCI DSS HIPAA SOC 2 ISO 27018 CCPA GDPR DORA”
Trust page, www.netlify.com ↗
PCI DSS: Active

“Certified security ISO 27001 PCI DSS HIPAA SOC 2 ISO 27018 CCPA GDPR DORA”
Trust page, www.netlify.com ↗

Documents we track for Netlify

Privacy policy: checked October 2, 2026 www.netlify.com ↗
Subprocessor list: checked October 2, 2026 www.netlify.com ↗
Terms of service: checked October 2, 2026 www.netlify.com ↗
Trust page: checked October 2, 2026 www.netlify.com ↗

Change history

Tracking since October 2, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Netlify subprocessors FAQ

How many subprocessors does Netlify use?: Netlify lists 26 subprocessors on its published list, including Altinity, Inc / Clickhouse, Amazon Web Services (AWS), Amplitude, Inc., Anthropic, and Automattic, Inc. (Akismet) and 21 more.
Where does Netlify process customer data?: The subprocessors named by Netlify are located in US and Global, as stated on its list.
Does Netlify use customer data to train AI models?: According to its privacy policy, Netlify uses customer data to train AI models unless customers opt out: “We do not use your code or content to train AI models unless you explicitly opt in.”
Which security certifications does Netlify list?: Netlify's trust page lists ISO 27001, HIPAA, and PCI DSS.
When was Netlify's subprocessor list last checked?: ClauseTrail last checked Netlify's subprocessor list on October 2, 2026. Lists are re-checked daily.
How do I find out when Netlify adds or removes a subprocessor?: ClauseTrail monitors Netlify's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.