Oneleet Subprocessors List (November 2026): Changes and History
Oneleet names 19 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Oneleet subprocessors (November 2026)
| # | Subprocessor | Purpose | Location | Data |
|---|---|---|---|---|
| 1 | Amazon Web Services | File uploads | — | — |
| 2 | Anthropic | Customer data required for AI functionality | — | — |
| 3 | Auth0 | User Metadata | — | PII |
| 4 | Browserbase | AI Workflows | — | — |
| 5 | Circleback | Meeting Transcription and Recordings | — | — |
| 6 | Cloudflare | Customer Trust Centers, CDN | — | — |
| 7 | Cognition | Pylon Customer Data | — | PII |
| 8 | Google Cloud Platform | Production database, storage buckets | — | PII |
| 9 | Hatchet | Customer data used in platform workflows | — | — |
| 10 | OpenAI | Customer data required for AI functionality | — | — |
| 11 | PostHog | Application analytics and session replays | — | — |
| 12 | Postmark | Email Communications | — | — |
| 13 | Pydantic AI | Observability Platform | — | — |
| 14 | Pylon | Customer Communications | — | — |
| 15 | Sentry | Frontend error reports and logs | — | — |
| 16 | Slack | Client Communications | — | PII |
| 17 | Temporal Cloud | Processing Jobs | — | — |
| 18 | TurboPuffer | Embeddings for the entirety of the audit dump for each client that performs a questionnaire automation flow. | — | PII |
| 19 | Zapier | Backend Sales Automation | — | — |
Get an email when Oneleet changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Certifications at Oneleet
What Oneleet's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?
- SOC 2 Type I
-
Active
“Oneleet, Inc. SOC 2 Type 1”
Trust page, trust.oneleet.com ↗ - SOC 2 Type II
-
Active
“SOC 2 Type 2”
Trust page, trust.oneleet.com ↗ - ISO 27001
-
Active
“ISO 27001”
Trust page, trust.oneleet.com ↗
Documents we track for Oneleet
- Privacy policy
- checked November 3, 2026 changed November 1, 2026 www.oneleet.com ↗
- Subprocessor list
- checked November 3, 2026 changed November 1, 2026 trust.oneleet.com ↗
- Terms of service
- checked November 3, 2026 changed November 1, 2026 www.oneleet.com ↗
- Trust page
- checked November 3, 2026 changed October 28, 2026 trust.oneleet.com ↗
Change history
-
October 30, 2026 – November 1, 2026 4 minor wording edits (Privacy policy, Terms of service) Show Reworded without changing what the documents say.
-
Terms of service changed
The document's substantive text is unchanged; section headings gained a period (e.g. '2.1 License' became '2.1 License.') and the title changed from 'Terms' to 'Terms and Service', with the remainder of the diff consisting of repeated site navigation, footer and marketing content blocks.
-
Privacy policy changed
The diff merges section headers with their following sentence into single lines (e.g. '10.1 Our Role:' plus text becomes one line) with no wording change, and the rest of the additions are repeated site navigation and footer content (menus, frameworks list, 'Cybersecurity compliance without security theatre' tagline, status widget) that is not part of the policy text.
-
Privacy policy changed
The policy text itself was reformatted by splitting numbered headings (e.g. "10.1 Our Role:") onto their own lines from the following sentence, with no wording changes; the remaining removed lines are repeated site navigation, footer and branding content, not part of the policy.
-
Terms of service changed
The title changed from "Terms and Service" to "Terms" and section headers throughout (e.g., "2.1 License." to "2.1 License") had their trailing periods removed; the rest of the removed lines are repeated site navigation and footer boilerplate (menus, frameworks list, social links) rather than document text.
-
-
Certification changed
Oneleet now lists SOC 2 Type II on its trust page.
-
Certification changed
Oneleet now lists SOC 2 Type I on its trust page.
-
Certification changed
Oneleet now lists ISO 27001 on its trust page.
-
October 14, 2026 – October 16, 2026 2 minor wording edits (Terms of service) Show Reworded without changing what the documents say.
-
Terms of service changed
A line was added pointing to an archived version of the prior Terms of Service, dated March 6, 2026, at oneleet.com/terms-old; no other text in the document changed.
-
Terms of service changed
A line linking to the previous version of the terms (as of March 6, 2026, at oneleet.com/terms-old) was removed from the document header; no other text changed.
-
Tracking since October 16, 2026. Every change links to the two versions of the document it came from. All vendors' changes →
Oneleet subprocessors FAQ
- How many subprocessors does Oneleet use?
- Oneleet lists 19 subprocessors on its published list, including Amazon Web Services, Anthropic, Auth0, Browserbase, and Circleback and 14 more.
- Does Oneleet have a SOC 2 Type II report?
- Yes. Oneleet's trust page lists a SOC 2 Type II report: “SOC 2 Type 2”
- Which security certifications does Oneleet list?
- Oneleet's trust page lists SOC 2 Type I, SOC 2 Type II, and ISO 27001.
- When was Oneleet's subprocessor list last checked?
- ClauseTrail last checked Oneleet's subprocessor list on November 3, 2026 and last saw it change on November 1, 2026. Lists are re-checked daily.
- How do I find out when Oneleet adds or removes a subprocessor?
- ClauseTrail monitors Oneleet's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.