Ox Security Subprocessors List (November 2026): Changes and History
Ox Security names 5 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Ox Security subprocessors (November 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Amazon Web Services | Compute | EU |
| 2 | MongoDB | Database and data at rest encryption | EU |
| 3 | Auth0 | Admin management and authorization | EU |
| 4 | DataDog | Runtime and historical log analysis | EU |
| 5 | Azure OpenAI | AI model hosting and generation (limited to AI features) | US |
Get an email when Ox Security changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
AI and customer data at Ox Security
What Ox Security's own documents say, with the sentence each answer comes from.
- Trains AI models on customer data
-
No
“These subprocessors process Input solely for the purpose of generating Output and are contractually restricted from using Input to train their foundation models.”
Terms of service, www.ox.security ↗ - Sends customer data to AI model providers
-
Yes
“To provide the AI Features, OX Security uses trusted third-party providers ("AI Subprocessors").”
Terms of service, www.ox.security ↗ - How to opt out
-
Not stated in the documents we track.
Certifications at Ox Security
What Ox Security's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?
- SOC 2 Type II
-
Active
“SOC 2 Type II Available upon request GDPR Compliance ISO 27001:2022 Certified”
Trust page, www.ox.security ↗ - ISO 27001
-
Active
“SOC 2 Type II Available upon request GDPR Compliance ISO 27001:2022 Certified”
Trust page, www.ox.security ↗
Documents we track for Ox Security
- Privacy policy
- checked November 3, 2026 changed October 30, 2026 www.ox.security ↗
- Subprocessor list
- checked November 2, 2026 www.ox.security ↗
- Terms of service
- checked November 3, 2026 changed October 30, 2026 www.ox.security ↗
- Trust page
- checked November 3, 2026 www.ox.security ↗
Change history
Tracking since October 23, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Ox Security subprocessors FAQ
- How many subprocessors does Ox Security use?
- Ox Security lists 5 subprocessors on its published list, including Amazon Web Services, MongoDB, Auth0, DataDog, and Azure OpenAI.
- Where does Ox Security process customer data?
- The subprocessors named by Ox Security are located in EU and US, as stated on its list.
- Does Ox Security use customer data to train AI models?
- According to its terms of service, Ox Security does not use customer data to train AI models: “These subprocessors process Input solely for the purpose of generating Output and are contractually restricted from using Input to train their foundation models.”
- Does Ox Security have a SOC 2 Type II report?
- Yes. Ox Security's trust page lists a SOC 2 Type II report: “SOC 2 Type II Available upon request GDPR Compliance ISO 27001:2022 Certified”
- Which security certifications does Ox Security list?
- Ox Security's trust page lists SOC 2 Type II and ISO 27001.
- When was Ox Security's subprocessor list last checked?
- ClauseTrail last checked Ox Security's subprocessor list on November 2, 2026. Lists are re-checked daily.
- How do I find out when Ox Security adds or removes a subprocessor?
- ClauseTrail monitors Ox Security's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.