Resend Subprocessors List (September 2026): Changes and History

Resend names 22 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

Resend subprocessors (September 2026)

# Subprocessor Purpose Location
1 Amazon Web Services, Inc. (USA) Third party hosting and sending provider —
2 Anthropic, PBC (USA) Artificial Intelligence —
3 Attio Limited (USA) Customer relationship management —
4 Cloudflare, Inc. (USA) Web application firewall —
5 Datadog, Inc. (USA) Infrastructure monitoring —
6 Elastic N.V. (USA) In-app search —
7 Estuary Technologies, Inc. (USA) Data pipeline —
8 Google, Inc. (USA) Email communications and analytics —
9 Inngest Inc (USA) Background jobs —
10 Liveblocks, Inc. (USA) In-app collaboration —
11 Metabase, Inc. (USA) Product analytics —
12 Not Just Tickets Limited (USA) Support platform Plain
13 PlanetScale, Inc. (USA) Database hosting —
14 Retool, Inc. (USA) Internal admin tools —
15 RunPod, Inc. (USA) Self-hosted LLMs —
16 Salesforce, Inc. (USA) Team communication Slack
17 Snowflake Inc. (USA) Data warehouse —
18 Stripe, Inc. (USA) Payment processing —
19 Supabase, Inc (USA) Database and user authentication —
20 Svix Inc. (USA) Webhook services —
21 Tinybird Inc. (USA) Data analytics —
22 Vercel Inc. (USA) Server hosting —

Get an email when Resend changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Resend free

Key DPA terms at Resend

What Resend's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification

Without undue delay, with no set deadline

“Company shall, without undue delay, inform Customer of the Personal Data Breach”
DPA, resend.com ↗
Notice of a new subprocessor

14 days ahead

“Company shall specifically inform the Customer in writing of any intended changes to that list through the addition or replacement of sub-processors at least fourteen (14) days in advance”
DPA, resend.com ↗
Transfers outside the EU

Standard contractual clauses and the EU–US Data Privacy Framework

“The parties agree that ex-EEA Transfers are made pursuant to the EU SCCs, which are deemed entered into (and incorporated into this DPA by this reference) and completed as follows”
“The Company complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce.”
DPA, resend.com ↗
Customer data after the contract ends

Deleted within 90 days of the contract ending

“When the Customer terminates their use of the Services, we delete their user/customer data within 90 days of the account termination.”
DPA, resend.com ↗
Audit rights

Once a year

“such audit shall only be performed during business hours and occur no more than once per calendar year”
DPA, resend.com ↗

Documents we track for Resend

DPA
checked September 26, 2026 resend.com ↗
Privacy policy
checked September 26, 2026 resend.com ↗
Subprocessor list
checked September 26, 2026 resend.com ↗
Terms of service
checked September 26, 2026 resend.com ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Resend subprocessors FAQ

How many subprocessors does Resend use?
Resend lists 22 subprocessors on its published list, including Amazon Web Services, Inc. (USA), Anthropic, PBC (USA), Attio Limited (USA), Cloudflare, Inc. (USA), and Datadog, Inc. (USA) and 17 more.
Where does Resend process customer data?
The subprocessors named by Resend are located in Plain and Slack, as stated on its list.
How quickly does Resend report a personal data breach to customers?
According to its DPA, Resend reports a personal data breach to customers without undue delay, with no set deadline: “Company shall, without undue delay, inform Customer of the Personal Data Breach”
How much notice does Resend give before adding a subprocessor?
Resend's DPA gives 14 days' notice of a new subprocessor, the time customers have to object: “Company shall specifically inform the Customer in writing of any intended changes to that list through the addition or replacement of sub-processors at least fourteen (14) days in advance”
How does Resend transfer personal data outside the EU?
Resend's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “The parties agree that ex-EEA Transfers are made pursuant to the EU SCCs, which are deemed entered into (and incorporated into this DPA by this reference) and completed as follows”
When was Resend's subprocessor list last checked?
ClauseTrail last checked Resend's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when Resend adds or removes a subprocessor?
ClauseTrail monitors Resend's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.