How many subprocessors does Persefoni use?

Persefoni lists 25 subprocessors on its published list, including Amazon Web Services, Arcadia (Urjanet), Auth0, Databricks, and Google and 20 more.

Where does Persefoni process customer data?

The subprocessors named by Persefoni are located in United States, Germany, Ireland, Australia, Japan, and Singapore and 11 other locations, as stated on its list.

Does Persefoni have a SOC 2 Type II report?

Yes. Persefoni's trust page lists a SOC 2 Type II report: “SOC 2 Type II: An attestation that provides an external auditor's validation that Persefoni's security controls were in place and effective for the report's coverage period as related to the American Institute of Certified Public Accountant's (AICPA) trust service principles.”

Which security certifications does Persefoni list?

Persefoni's trust page lists SOC 2 Type II, ISO 27001, and CSA STAR.

When was Persefoni's subprocessor list last checked?

ClauseTrail last checked Persefoni's subprocessor list on November 2, 2026. Lists are re-checked daily.

How do I find out when Persefoni adds or removes a subprocessor?

ClauseTrail monitors Persefoni's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Persefoni Subprocessors List (November 2026): Changes and History

Persefoni names 25 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 2, 2026 Official source ↗

Persefoni subprocessors (November 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services	The Persefoni CMAP is built and hosted on the AWS public computing cloud. All data provided, submitted, and processed on behalf of customers is stored on AWS. This includes user names, business email addresses, and other business contact information provided by users.	Ireland, Japan, United States
2	Arcadia (Urjanet)	Provides utility data aggregation and management services for energy management and sustainability reporting, alternative credit scoring, etc.	United States
3	Auth0	Persefoni utilizes Auth0 for identity and authentication services including legacy user id and password authentication, multi-factor authentication, and single sign-on functionality of the Persefoni CMAP. To facilitate authentication services, user names, business email addresses, and mobile device numbers (when the customer elects multi-factor authentication) are stored on Auth0. Logs may include timestamps, tokens, email addresses, usernames, account data, names, IP addresses, and other types of data.	United States
4	Databricks	Databricks provides an analysis and analytics platform that is used to evaluate and direct website traffic and Persefoni CMAP data including submitted personal information and business contact information, and customer data for use in dashboards and machine learning models.	United States
5	Google	Google provides support for maps used in the Persefoni CMAP via Google Maps. Logs may include timestamps, tokens, email addresses, usernames, account data, names, IP addresses, and other types of data.	Belgium, Chile, Denmark, Finland, Ireland, Netherlands, Singapore, Taiwan, United States
6	Netsuite	NetSuite is Persefoni's financial system used for contract management, invoicing, collections, and other financial functions. To facilitate these activities, the system may contain customer names and email addresses, commercial contact information, customer financials, and other types of data.	United States
7	Snowflake	Persefoni utilizes Snowflake as a data warehouse and analytics platform to evaluate user behavior within the CMAP and analyze and aggregate customer data for dashboards, reports, comparables, and benchmarking functionality. The tool may contain customer data and calculations, aggregate data, timestamps, tokens, email addresses, usernames, account data, names, IP addresses, and other types of data.	Ireland, United States
8	Zendesk	Vendor that provides an interface for customers to report issues to Persefoni's Customer Success team and use application support resources and documentation	Australia, Germany, Ireland, Japan, United States
9	Amplitude	Amplitude is a user experience platform to understand user behavior and activities across the Persefoni CMAP. To perform these activities, Amplitude logs may include timestamps, business email addresses, names, account data, IP addresses, and other types of data.	Germany, United States
10	Atlassian	Persefoni utilizes Atlassian Jira as its bug and task management tool for software development. Customer-reported bugs may include names, email addresses, contact information, and other types of data. Persefoni also utilizes the Atlassian Status page to report on the availability of the Persefoni CMAP. Individuals who have signed up for status updates may have their email address stored in the system.	Australia, Germany, Ireland, Singapore, United States
11	ChurnZero	ChurnZero is a customer success SaaS service that helps Persefoni understand how customers use the CMAP, assess customer health, and evaluate a customer's likelihood to renew. The system may contain business email addresses, commercial contact information, other business and commercial information, and other types of data.	United States
12	Datadog	The Datadog logging platform is used for ingesting, parsing, querying, and performing analytics on application and infrastructure logs for debugging, troubleshooting, auditing, reporting, detecting, and alerting. Logs may include timestamps, tokens, email addresses, usernames, account data, names, IP addresses, and other types of data.	Germany, United States
13	dbt Labs	DBT is a data transformation tool used in conjunction with solutions like Snowflake and Databricks. While performing analysis and transformation in DBT, Persefoni CMAP data is temporarily previewed within the application for quality and development purposes, and this tool may contain submitted personal information, business contact information, and other customer data.	United States
14	Fivetran	Fivetran facilitates data transfer between various systems and Persefoni data warehousing solutions in AWS and Snowflake. This may include account information, business and commercial contact information, customer financial information, and data collected from and submitted by visitors to Persefoni's website.	Canada, Germany, India, Ireland, Netherlands, Singapore, United Kingdom, United States
15	Flagsmith	Flagsmith, operated by Bullet Train Limited, is a feature flagging tool used to restrict access to various product features during the software development lifecycle or subject to the Persefoni CMAP features purchased by a customer. To perform this function, the tool may contain business email addresses.	United Kingdom, United States
16	HubSpot CRM	Hubspot is a marketing and communication tool that provides a platform for Persefoni to communicate with leads and existing customers regarding announcements, CMAP status, carbon accounting information, product information, and offers. To facilitate these communications, the tool may contain names, business email addresses, and other types of data.	Germany, United States
17	Ironclad	IronClad is a contract lifecycle management tool that provides a platform for Persefoni to manage the end-to-end process of signing contracts with customers, vendors, and other third parties. To facilitate contract management activities, the system may contain customer, vendor, or other third-party email addresses, names, commercial contact information, contracts, and other types of data.	United States
18	Salesforce CRM	Salesforce is Persefoni's customer relationship management system and may contain customer names, provided or business email addresses, commercial contact information, other business and commercial information, financial and contract information, and other types of data.	Australia, Canada, European Union, India, Japan, South America, United Kingdom, United States
19	Slack	Persefoni utilizes Slack for internal messaging and collaboration. In some cases, Persefoni may create Slack support channels for customers. Those channels and Slack logs may contain timestamps, tokens, email addresses, usernames, account data, names, IP addresses, and other types of data.	United States
20	Twilio	Persefoni utilizes Twilio's Segment application to log and coordinate user events and activities between Persefoni databases and systems. The system may contain names, business email addresses, IP addresses, commercial contact information, other business and commercial information, and other types of data.	Ireland, United States
21	Workato	Persefoni utilizes Workato to provide customers the ability to set up third-party integrations made available through Persefoni's Integration Hub, such as Google Sheets, Concur, etc. The tool may process business email addresses, names, contact information provided by customers, data components submitted by the customer's integrations, and other types of data.	Germany, United States
22	Zoom	Persefoni utilizes ZoomInfo to help automate parts of the marketing, sales, and account setup process. The tool may contain business email addresses, commercial contact information, other business and commercial information, and other types of data.	United States
23	OpenAI (ChatGPT)	Persefoni utilizes OpenAI's API services to generate grounded responses within the Persefoni Copilot feature and to create text embeddings used for semantic retrieval. Prompts sent to OpenAI contain only the minimum necessary text required to fulfill the user request and exclude user identifiers. Customer datasets are not used to train OpenAI foundation models. All API communications are encrypted in transit and subject to Persefoni's access control and monitoring safeguards.	United States
24	Anthropic	Persefoni may utilize Anthropic language models accessed through AWS Bedrock to generate responses within the Persefoni Copilot feature. Prompts include only the minimum necessary text and exclude user identifiers. Customer datasets are not used to train third party foundation models. Processing occurs within approved AWS regions under secure API configurations.	United States
25	Pinecone	Pinecone provides vector database services used to store and retrieve embeddings of approved enterprise knowledge content for Retrieval Augmented Generation functionality within Copilot. Pinecone stores vectorized representations of documentation and related metadata to enable relevant content retrieval. Customer specific datasets are not used for generation. All data is encrypted in transit and at rest.	United States

Get an email when Persefoni changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Persefoni free

Certifications at Persefoni

What Persefoni's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“SOC 2 Type II: An attestation that provides an external auditor's validation that Persefoni's security controls were in place and effective for the report's coverage period as related to the American Institute of Certified Public Accountant's (AICPA) trust service principles.”
Trust page, www.persefoni.com ↗
ISO 27001: Active

“ISO 27001: A certification that provides external auditor validation that an effective Information Security Management System (ISMS) has been established to identify and manage information risks through a comprehensive set of company-wide processes and security controls, including procedures and controls that continually improve the ISMS.”
Trust page, www.persefoni.com ↗
CSA STAR: Active

“CSA STAR Level 2 Gold: A certification that provides external auditor validation that Persefoni's security controls are implemented according to the Cloud Security Alliance (CSA) Consensus Assessment Initiative Questionnaire (CAIQ).”
Trust page, www.persefoni.com ↗

Documents we track for Persefoni

Subprocessor list: checked November 2, 2026 trust.persefoni.com ↗
Trust page: checked November 3, 2026 www.persefoni.com ↗

Change history

Tracking since October 17, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Persefoni subprocessors FAQ

How many subprocessors does Persefoni use?: Persefoni lists 25 subprocessors on its published list, including Amazon Web Services, Arcadia (Urjanet), Auth0, Databricks, and Google and 20 more.
Where does Persefoni process customer data?: The subprocessors named by Persefoni are located in United States, Germany, Ireland, Australia, Japan, and Singapore and 11 other locations, as stated on its list.
Does Persefoni have a SOC 2 Type II report?: Yes. Persefoni's trust page lists a SOC 2 Type II report: “SOC 2 Type II: An attestation that provides an external auditor's validation that Persefoni's security controls were in place and effective for the report's coverage period as related to the American Institute of Certified Public Accountant's (AICPA) trust service principles.”
Which security certifications does Persefoni list?: Persefoni's trust page lists SOC 2 Type II, ISO 27001, and CSA STAR.
When was Persefoni's subprocessor list last checked?: ClauseTrail last checked Persefoni's subprocessor list on November 2, 2026. Lists are re-checked daily.
How do I find out when Persefoni adds or removes a subprocessor?: ClauseTrail monitors Persefoni's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.