How many subprocessors does Showpad use?

Showpad lists 19 subprocessors on its published list, including Showpad EU Affiliates, Showpad Non-EU Affiliates, Showpad ltd. (UK), Showpad Inc., and Amazon Web Services EMEA SARL and 14 more.

Where does Showpad process customer data?

The subprocessors named by Showpad are located in US, EU, India, and UK, as stated on its list.

How quickly does Showpad report a personal data breach to customers?

According to its DPA, Showpad reports a personal data breach to customers within 48 hours: “Showpad shall notify Customer without undue delay, and within no more than forty‑eight (48) hours, after becoming aware of a Personal Data Breach.”

How much notice does Showpad give before adding a subprocessor?

Showpad's DPA gives 20 days' notice of a new subprocessor, the time customers have to object: “Customer must provide Showpad with notice of any such opposition within twenty (20) days following the relevant notification by Showpad under Section 2.2, in the absence of which Customer shall have accepted the respective addition or replacement.”

How does Showpad transfer personal data outside the EU?

Showpad's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions: “Showpad is self‑certified pursuant to the EU‑US Data Privacy Framework.”

When was Showpad's subprocessor list last checked?

ClauseTrail last checked Showpad's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when Showpad adds or removes a subprocessor?

ClauseTrail monitors Showpad's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Showpad Subprocessors List (September 2026): Changes and History

Showpad names 19 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Showpad subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Showpad EU Affiliates	Support services for the Showpad Platform	EU
2	Showpad Non-EU Affiliates	Support services for the Showpad Platform	India
3	Showpad ltd. (UK)	Support services for the Showpad Platform	UK
4	Showpad Inc.	Support services for the Showpad Platform	US
5	Amazon Web Services EMEA SARL	Hosting services	EU
6	Google Ireland Ltd.	Google fonts	EU
7	Sendgrid Inc.	SMTP gateway	US
8	Box Inc. / Box UK Ltd.	Boxview PDF rendering	US
9	Datadog	logging & logging management	US
10	Pendo	User activation	US
11	ClickHouse	Reporting & analytics	EU
12	Luzmo	Reporting & analytics	EU
13	Nylas	Calendar integration	EU
14	Azure	Translation and TTS	EU, US
15	ElevenLabs	Translation and TTS	US
16	OpenAI	Natural Language Processing (NLP)	US
17	Deepgram	Speech-To-Text / Audio intelligence	US
18	RevAI	Speech-To-Text	US
19	Heygen	AI video	US

Get an email when Showpad changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Showpad free

Key DPA terms at Showpad

What Showpad's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 48 hours

“Showpad shall notify Customer without undue delay, and within no more than forty‑eight (48) hours, after becoming aware of a Personal Data Breach.”
DPA, www.showpad.com ↗
Notice of a new subprocessor: 20 days ahead

“Customer must provide Showpad with notice of any such opposition within twenty (20) days following the relevant notification by Showpad under Section 2.2, in the absence of which Customer shall have accepted the respective addition or replacement.”
DPA, www.showpad.com ↗
Transfers outside the EU: Standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions

“Showpad is self‑certified pursuant to the EU‑US Data Privacy Framework.”

“Showpad, Inc. shall abide by and accept the provisions of the EU Model Clauses, which are incorporated herein by reference and further detailed in Annex 3.”

“a so‑called "appropriate safeguard" (e.g., in execution of article 46 of the GDPR, including binding corporate rules, applicable EU standard contractual clauses, or an approved code of conduct); and/or”

“a so‑called "adequacy decision" (e.g., in execution of article 45 of the GDPR, including the EU‑US Data Privacy Framework, Canada adequacy decision, and Japan adequacy decision);”
DPA, www.showpad.com ↗
Audit rights: Through certifications and audit reports only

“Customer agrees to accept the findings presented therein in lieu of requesting additional information or an audit of the same controls already covered in such TPAR.”
DPA, www.showpad.com ↗

Documents we track for Showpad

DPA: checked September 28, 2026 www.showpad.com ↗
Privacy policy: checked September 28, 2026 www.showpad.com ↗
Subprocessor list: checked September 28, 2026 www.showpad.com ↗
Terms of service: checked September 28, 2026 www.showpad.com ↗
Trust page: checked September 28, 2026 www.showpad.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Showpad subprocessors FAQ

How many subprocessors does Showpad use?: Showpad lists 19 subprocessors on its published list, including Showpad EU Affiliates, Showpad Non-EU Affiliates, Showpad ltd. (UK), Showpad Inc., and Amazon Web Services EMEA SARL and 14 more.
Where does Showpad process customer data?: The subprocessors named by Showpad are located in US, EU, India, and UK, as stated on its list.
How quickly does Showpad report a personal data breach to customers?: According to its DPA, Showpad reports a personal data breach to customers within 48 hours: “Showpad shall notify Customer without undue delay, and within no more than forty‑eight (48) hours, after becoming aware of a Personal Data Breach.”
How much notice does Showpad give before adding a subprocessor?: Showpad's DPA gives 20 days' notice of a new subprocessor, the time customers have to object: “Customer must provide Showpad with notice of any such opposition within twenty (20) days following the relevant notification by Showpad under Section 2.2, in the absence of which Customer shall have accepted the respective addition or replacement.”
How does Showpad transfer personal data outside the EU?: Showpad's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, binding corporate rules, and adequacy decisions: “Showpad is self‑certified pursuant to the EU‑US Data Privacy Framework.”
When was Showpad's subprocessor list last checked?: ClauseTrail last checked Showpad's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Showpad adds or removes a subprocessor?: ClauseTrail monitors Showpad's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.