SevenRooms Subprocessors List (September 2026): Changes and History
SevenRooms names 28 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
SevenRooms subprocessors (September 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Google Inc. | Hosting, servers, processing of customer data, and business analytics. CDE environment is hosted here. | United States |
| 2 | Atlassian | Change management, Code Repository and Revision Control, and Deployment Pipeline platform | Australia |
| 3 | Elastic | Search capabilities in platform | United States |
| 4 | Amazon Web Services, Inc. | Sending emails to guests | United States |
| 5 | Twilio, Inc. | SMS messaging from VMS to guests | United States |
| 6 | Mailchimp | Marketing automation emails | United States |
| 7 | Stripe | Tokenized payment processing for customers | United States |
| 8 | Network International LLC | Tokenized payment processing for customers (UAE only) | United Arab Emirates |
| 9 | FreedomPay | Tokenized payment processing for customers | United States |
| 10 | Cybersource | Tokenized payment processing for customers | United States |
| 11 | FiveTran | Used for ETL Data transfer | United States |
| 12 | Bolton | Used to provide support services for our customers during onboarding and setup | United States |
| 13 | Zendesk | Customer Support Services | United States |
| 14 | Adyen | Tokenized payment processing for customers | Netherlands |
| 15 | SaferPay (formerly SIX Payments) | Tokenized payment processing for customers | Switzerland |
| 16 | SendSafely | Secure file exchange service used as part of onboarding processes | United States |
| 17 | Census | Reverse ETL tool used to move data between data warehouse into business systems | United States |
| 18 | Guru | Enterprise search for support-related issues | United States |
| 19 | Andela | Development Services | United States |
| 20 | Appwell LLC | Development Services | United States |
| 21 | Sphere Partners LLC | Development Services | United States |
| 22 | Anthropic | AI Services | United States |
| 23 | OpenAI | AI Services | United States |
| 24 | ElevenLabs Inc. | Voice AI Services | United States |
| 25 | RedPanda Data, Inc. | Data transfer tool | United States |
| 26 | Basis Theory Inc. | Tokenized payment processing for customers | United States |
| 27 | Slack | Customer Support Services | United States |
| 28 | Flatfile | Data transfer tool | United States |
Get an email when SevenRooms changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Key DPA terms at SevenRooms
What SevenRooms's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?
- Breach notification
-
Without undue delay, with no set deadline
“SevenRooms will notify Client without undue delay after it becomes aware of any Personal Data Breach”
DPA, sevenrooms.com ↗ - Notice of a new subprocessor
-
10 days ahead
“Client may object to SevenRooms' use of a new Sub-processor by notifying SevenRooms in writing within ten (10) business days after receipt of a notification”
DPA, sevenrooms.com ↗ - Transfers outside the EU
-
Standard contractual clauses, binding corporate rules, and adequacy decisions
“the parties shall comply with their respective obligations set out in the SCCs, which are hereby deemed to be: (i) populated in accordance with Part 1 of Schedule 3”
“transferring such data to a recipient that has achieved binding corporate rules authorization in accordance with European Data Protection Laws”
“any country or territory outside the EEA which does not benefit from an adequacy decision from the European Commission”
DPA, sevenrooms.com ↗ - Customer data after the contract ends
-
Deleted or returned when the contract ends
“After the termination of this DPA, SevenRooms will delete or return all Client Personal Data (including copies thereof) promptly upon its receipt of written notice from Client”
DPA, sevenrooms.com ↗ - Audit rights
-
Once a year
“Client (or its permitted third-party auditor as provided above) may perform an Audit remotely or on-site, up to one (1) time per calendar year, with at least three (3) weeks' advance written notice”
DPA, sevenrooms.com ↗
Documents we track for SevenRooms
- DPA
- checked September 28, 2026 sevenrooms.com ↗
- Privacy policy
- checked September 28, 2026 sevenrooms.com ↗
- Subprocessor list
- checked September 28, 2026 sevenrooms.com ↗
- Terms of service
- checked September 28, 2026 sevenrooms.com ↗
- Trust page
- trust.sevenrooms.com ↗
Change history
Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
SevenRooms subprocessors FAQ
- How many subprocessors does SevenRooms use?
- SevenRooms lists 28 subprocessors on its published list, including Google Inc., Atlassian, Elastic, Amazon Web Services, Inc., and Twilio, Inc. and 23 more.
- Where does SevenRooms process customer data?
- The subprocessors named by SevenRooms are located in United States, Australia, Netherlands, Switzerland, and United Arab Emirates, as stated on its list.
- How quickly does SevenRooms report a personal data breach to customers?
- According to its DPA, SevenRooms reports a personal data breach to customers without undue delay, with no set deadline: “SevenRooms will notify Client without undue delay after it becomes aware of any Personal Data Breach”
- How much notice does SevenRooms give before adding a subprocessor?
- SevenRooms's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Client may object to SevenRooms' use of a new Sub-processor by notifying SevenRooms in writing within ten (10) business days after receipt of a notification”
- How does SevenRooms transfer personal data outside the EU?
- SevenRooms's DPA relies on standard contractual clauses, binding corporate rules, and adequacy decisions: “the parties shall comply with their respective obligations set out in the SCCs, which are hereby deemed to be: (i) populated in accordance with Part 1 of Schedule 3”
- When was SevenRooms's subprocessor list last checked?
- ClauseTrail last checked SevenRooms's subprocessor list on September 28, 2026. Lists are re-checked daily.
- How do I find out when SevenRooms adds or removes a subprocessor?
- ClauseTrail monitors SevenRooms's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.