Resend Subprocessors List (September 2026): Changes and History
Resend names 22 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Resend subprocessors (September 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Amazon Web Services, Inc. (USA) | Third party hosting and sending provider | — |
| 2 | Anthropic, PBC (USA) | Artificial Intelligence | — |
| 3 | Attio Limited (USA) | Customer relationship management | — |
| 4 | Cloudflare, Inc. (USA) | Web application firewall | — |
| 5 | Datadog, Inc. (USA) | Infrastructure monitoring | — |
| 6 | Elastic N.V. (USA) | In-app search | — |
| 7 | Estuary Technologies, Inc. (USA) | Data pipeline | — |
| 8 | Google, Inc. (USA) | Email communications and analytics | — |
| 9 | Inngest Inc (USA) | Background jobs | — |
| 10 | Liveblocks, Inc. (USA) | In-app collaboration | — |
| 11 | Metabase, Inc. (USA) | Product analytics | — |
| 12 | Not Just Tickets Limited (USA) | Support platform | Plain |
| 13 | PlanetScale, Inc. (USA) | Database hosting | — |
| 14 | Retool, Inc. (USA) | Internal admin tools | — |
| 15 | RunPod, Inc. (USA) | Self-hosted LLMs | — |
| 16 | Salesforce, Inc. (USA) | Team communication | Slack |
| 17 | Snowflake Inc. (USA) | Data warehouse | — |
| 18 | Stripe, Inc. (USA) | Payment processing | — |
| 19 | Supabase, Inc (USA) | Database and user authentication | — |
| 20 | Svix Inc. (USA) | Webhook services | — |
| 21 | Tinybird Inc. (USA) | Data analytics | — |
| 22 | Vercel Inc. (USA) | Server hosting | — |
Get an email when Resend changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Key DPA terms at Resend
What Resend's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?
- Breach notification
-
Without undue delay, with no set deadline
“Company shall, without undue delay, inform Customer of the Personal Data Breach”
DPA, resend.com ↗ - Notice of a new subprocessor
-
14 days ahead
“Company shall specifically inform the Customer in writing of any intended changes to that list through the addition or replacement of sub-processors at least fourteen (14) days in advance”
DPA, resend.com ↗ - Transfers outside the EU
-
Standard contractual clauses and the EU–US Data Privacy Framework
“The parties agree that ex-EEA Transfers are made pursuant to the EU SCCs, which are deemed entered into (and incorporated into this DPA by this reference) and completed as follows”
“The Company complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce.”
DPA, resend.com ↗ - Customer data after the contract ends
-
Deleted within 90 days of the contract ending
“When the Customer terminates their use of the Services, we delete their user/customer data within 90 days of the account termination.”
DPA, resend.com ↗ - Audit rights
-
Once a year
“such audit shall only be performed during business hours and occur no more than once per calendar year”
DPA, resend.com ↗
Documents we track for Resend
- DPA
- checked September 26, 2026 resend.com ↗
- Privacy policy
- checked September 26, 2026 resend.com ↗
- Subprocessor list
- checked September 26, 2026 resend.com ↗
- Terms of service
- checked September 26, 2026 resend.com ↗
Change history
Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Resend subprocessors FAQ
- How many subprocessors does Resend use?
- Resend lists 22 subprocessors on its published list, including Amazon Web Services, Inc. (USA), Anthropic, PBC (USA), Attio Limited (USA), Cloudflare, Inc. (USA), and Datadog, Inc. (USA) and 17 more.
- Where does Resend process customer data?
- The subprocessors named by Resend are located in Plain and Slack, as stated on its list.
- How quickly does Resend report a personal data breach to customers?
- According to its DPA, Resend reports a personal data breach to customers without undue delay, with no set deadline: “Company shall, without undue delay, inform Customer of the Personal Data Breach”
- How much notice does Resend give before adding a subprocessor?
- Resend's DPA gives 14 days' notice of a new subprocessor, the time customers have to object: “Company shall specifically inform the Customer in writing of any intended changes to that list through the addition or replacement of sub-processors at least fourteen (14) days in advance”
- How does Resend transfer personal data outside the EU?
- Resend's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “The parties agree that ex-EEA Transfers are made pursuant to the EU SCCs, which are deemed entered into (and incorporated into this DPA by this reference) and completed as follows”
- When was Resend's subprocessor list last checked?
- ClauseTrail last checked Resend's subprocessor list on September 26, 2026. Lists are re-checked daily.
- How do I find out when Resend adds or removes a subprocessor?
- ClauseTrail monitors Resend's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.