Replit Subprocessors List (September 2026): Changes and History
Replit names 49 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Last checked September 26, 2026
Official source ↗
Replit subprocessors (September 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Amplitude | Analytics | USA |
| 2 | Anima App, Inc. | Design system imports | USA |
| 3 | Anthropic | AI models | USA |
| 4 | AppsFlyer INC | Analytics and customer interactions | USA |
| 5 | Attribution Inc. | Marketing and analytics | USA |
| 6 | Baseten | AI infrastructure platform | USA |
| 7 | Catamorphic Co. DBA LaunchDarkly | Engineering | USA |
| 8 | Civilized Discourse Construction Kit, Inc | Customer support | USA |
| 9 | Clazar | Billing | USA |
| 10 | Clerk | Enterprise SSO | USA |
| 11 | Cloudflare | Cloud infrastructure | USA |
| 12 | Common Room | Customer support | USA |
| 13 | Datadog, Inc. | Analytics | USA |
| 14 | Enterpret | Customer feedback | USA |
| 15 | Fireworks AI, Inc. | AI infrastructure platform | USA |
| 16 | Fivetran | Data storage and processing | USA |
| 17 | Google, Inc | Cloud Infrastructure for our apps and services, AI models; analytics and customer interactions | USA |
| 18 | Grafana Labs | Cloud monitoring | USA |
| 19 | Hashboard | Analytics | USA |
| 20 | HashiCorp Cloud | Cloud infrastructure | USA |
| 21 | Hex Technologies Inc | Analytics | USA |
| 22 | HubSpot | Marketing | USA |
| 23 | Inngest | Engineering | USA |
| 24 | IntouchCX Inc. | Customer support | Canada |
| 25 | Iterable | Marketing | USA |
| 26 | Looker Studio | Analytics | USA |
| 27 | Mailgun Technologies, Inc. | Marketing | USA |
| 28 | Microsoft Azure | Cloud infrastructure | USA |
| 29 | Name.com | Domain registrar | USA |
| 30 | Neon | Database management | USA |
| 31 | OpenAI | AI models | USA |
| 32 | OpenRouter | AI model selection for Integrations | USA |
| 33 | Orb | Billing | USA |
| 34 | OWND ApS (Parahelp) | Customer Support | USA |
| 35 | Parallel Web Systems | AI infrastructure platform | USA |
| 36 | Persona Identities, Inc. | Identity verification | USA |
| 37 | Segment | Analytics | USA |
| 38 | Sentry | Cloud monitoring | USA |
| 39 | SideGuide Technologies, Inc. d/b/a Firecrawl | Web data extraction for AI applications | USA |
| 40 | Stripe | Payment processing | USA |
| 41 | Stytch | Analytics and identity | USA |
| 42 | Synadia Cloud | Cloud services | USA |
| 43 | Temporal Technologies Inc. | Engineering | USA |
| 44 | Twilio | SMS verification | USA |
| 45 | Verifi Inc. | Payments | USA |
| 46 | WorkOS | Engineering | USA |
| 47 | Zapier | Collaboration | USA |
| 48 | Zendesk | Customer support | USA |
| 49 | ZoomInfo | Analytics and marketing | USA |
Get an email when Replit changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Key DPA terms at Replit
What Replit's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?
- Breach notification
-
Without undue delay, with no set deadline
“Company will notify Customer without undue delay after becoming aware of a Personal Data Breach involving Customer Personal Data.”
DPA, replit.com ↗ - Transfers outside the EU
-
Standard contractual clauses and adequacy decisions
“Customer and Company conclude the Standard Contractual Clauses, which are hereby incorporated into this DPA and completed as follows”
“Customer hereby authorizes Company to perform International Data Transfers to any country deemed adequate by the EU Commission or other competent authority under applicable Data Protection Law”
DPA, replit.com ↗ - Customer data after the contract ends
-
Deleted within 90 days of the contract ending
“Customer may request return or deletion of Customer Personal Data up to ninety (90) days after termination of the Agreement.”
DPA, replit.com ↗ - Audit rights
-
Through certifications and audit reports only
“This may include information pertaining to any applicable certifications (e.g. SOC 2) and other information reasonably necessary to demonstrate compliance with this DPA.”
DPA, replit.com ↗
Documents we track for Replit
- DPA
- checked September 26, 2026 replit.com ↗
- Privacy policy
- checked September 26, 2026 replit.com ↗
- Subprocessor list
- checked September 26, 2026 replit.com ↗
- Terms of service
- checked September 26, 2026 replit.com ↗
Change history
Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Replit subprocessors FAQ
- How many subprocessors does Replit use?
- Replit lists 49 subprocessors on its published list, including Amplitude, Anima App, Inc., Anthropic, AppsFlyer INC, and Attribution Inc. and 44 more.
- Where does Replit process customer data?
- The subprocessors named by Replit are located in USA and Canada, as stated on its list.
- How quickly does Replit report a personal data breach to customers?
- According to its DPA, Replit reports a personal data breach to customers without undue delay, with no set deadline: “Company will notify Customer without undue delay after becoming aware of a Personal Data Breach involving Customer Personal Data.”
- How does Replit transfer personal data outside the EU?
- Replit's DPA relies on standard contractual clauses and adequacy decisions: “Customer and Company conclude the Standard Contractual Clauses, which are hereby incorporated into this DPA and completed as follows”
- When was Replit's subprocessor list last checked?
- ClauseTrail last checked Replit's subprocessor list on September 26, 2026. Lists are re-checked daily.
- How do I find out when Replit adds or removes a subprocessor?
- ClauseTrail monitors Replit's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.