How many subprocessors does Panther use?

Panther lists 22 subprocessors on its published list, including Amazon Web Services, Inc., Astronomer, Inc., Atlassian, Census, and Cloudflare and 17 more.

Where does Panther process customer data?

The subprocessors named by Panther are located in United States, Canada, United States. Data Center region located in the region selected by Customer. Only applies for customers who have opted in for Snowflake., and United States. Data Center region located in the region selected by the customer., as stated on its list.

How quickly does Panther report a personal data breach to customers?

According to its DPA, Panther reports a personal data breach to customers without undue delay, with no set deadline: “Upon becoming aware of a Security Incident, Supplier shall notify Company without undue delay”

How much notice does Panther give before adding a subprocessor?

Panther's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Company may object to Supplier's use of a new subprocessor on reasonable grounds related to the protection of the Data by notifying Supplier in writing within ten (10) business days after publication of the revised subprocessors.”

How does Panther transfer personal data outside the EU?

Panther's DPA relies on standard contractual clauses: “With respect to Data transferred from the EEA, the EU SCCs will apply and form part of this DPA”

Does Panther have a SOC 2 Type II report?

Yes. Panther's trust page lists a SOC 2 Type II report: “SOC2 (Type2) Compliant”

Which security certifications does Panther list?

Panther's trust page lists SOC 2 Type II and ISO 27001.

When was Panther's subprocessor list last checked?

ClauseTrail last checked Panther's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when Panther adds or removes a subprocessor?

ClauseTrail monitors Panther's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Panther Subprocessors List (September 2026): Changes and History

Panther names 22 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Panther subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services, Inc.	Infrastructure-as-a-Service	United States. Data Center region located in the region selected by the customer.
2	Astronomer, Inc.	Product Analytics	United States
3	Atlassian	Incident Response and Project Management	United States
4	Census	Product Usage Information	United States
5	Cloudflare	Web Infrastructure	United States
6	Databricks	Data Platform	United States
7	Datadog	Observability	United States
8	DBT	Data Modeling	United States
9	Fivetran	Data Transformation	United States
10	Harness	Infrastructure-as-Code	United States
11	Hubspot	Customer Relationship Management	United States
12	Pendo	Analytics	United States
13	Pulumi	Infrastructure-as-Code	United States
14	Pylon	Customer Support	United States
15	Quebec Inc	Software publishing / onboarding & implementation services	Canada
16	Salesforce	Customer Relationship Management	United States
17	Segment	Product Analytics	United States
18	Sendgrid	Email Delivery	United States
19	Sentry	Application Error Tracking	United States
20	Slack	Chat and Customer Support	United States
21	Snowflake Inc.	Data Warehouse Services	United States. Data Center region located in the region selected by Customer. Only applies for customers who have opted in for Snowflake.
22	TachTech	Cybersecurity & digital transformation services (onboarding & implementation)	United States

Get an email when Panther changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Panther free

Key DPA terms at Panther

What Panther's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Upon becoming aware of a Security Incident, Supplier shall notify Company without undue delay”
DPA, panther.com ↗
Notice of a new subprocessor: 10 days ahead

“Company may object to Supplier's use of a new subprocessor on reasonable grounds related to the protection of the Data by notifying Supplier in writing within ten (10) business days after publication of the revised subprocessors.”
DPA, panther.com ↗
Transfers outside the EU: Standard contractual clauses

“With respect to Data transferred from the EEA, the EU SCCs will apply and form part of this DPA”
DPA, panther.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Upon termination or expiry of this Agreement, Supplier shall (at Company's election) destroy or return to Company all Data (including all copies of the Data) in its possession or control”
DPA, panther.com ↗
Audit rights: Once a year

“On request from Company, no more than once annually, Supplier will provide Company with: (i) Supplier's most recent SOC II Type 2 compliance report and ISO:27001 certification and (ii) complete a security questionnaire submitted by Company.”
DPA, panther.com ↗

Certifications at Panther

What Panther's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“SOC2 (Type2) Compliant”
Trust page, panther.com ↗
ISO 27001: Active

“ISO27001 Certified”
Trust page, panther.com ↗

Documents we track for Panther

DPA: checked September 28, 2026 panther.com ↗
Privacy policy: checked September 28, 2026 panther.com ↗
Subprocessor list: checked September 28, 2026 panther.com ↗
Terms of service: checked September 28, 2026 panther.com ↗
Trust page: checked September 28, 2026 panther.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Panther subprocessors FAQ

How many subprocessors does Panther use?: Panther lists 22 subprocessors on its published list, including Amazon Web Services, Inc., Astronomer, Inc., Atlassian, Census, and Cloudflare and 17 more.
Where does Panther process customer data?: The subprocessors named by Panther are located in United States, Canada, United States. Data Center region located in the region selected by Customer. Only applies for customers who have opted in for Snowflake., and United States. Data Center region located in the region selected by the customer., as stated on its list.
How quickly does Panther report a personal data breach to customers?: According to its DPA, Panther reports a personal data breach to customers without undue delay, with no set deadline: “Upon becoming aware of a Security Incident, Supplier shall notify Company without undue delay”
How much notice does Panther give before adding a subprocessor?: Panther's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Company may object to Supplier's use of a new subprocessor on reasonable grounds related to the protection of the Data by notifying Supplier in writing within ten (10) business days after publication of the revised subprocessors.”
How does Panther transfer personal data outside the EU?: Panther's DPA relies on standard contractual clauses: “With respect to Data transferred from the EEA, the EU SCCs will apply and form part of this DPA”
Does Panther have a SOC 2 Type II report?: Yes. Panther's trust page lists a SOC 2 Type II report: “SOC2 (Type2) Compliant”
Which security certifications does Panther list?: Panther's trust page lists SOC 2 Type II and ISO 27001.
When was Panther's subprocessor list last checked?: ClauseTrail last checked Panther's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Panther adds or removes a subprocessor?: ClauseTrail monitors Panther's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.