Socket Subprocessors List (September 2026): Changes and History

Socket names 23 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Socket subprocessors (September 2026)

# Subprocessor Purpose Location Data
1 ActiveCampaign, LLC (Postmark) Sending emails like password reset or login links — Emails, login magic links
2 Amazon Bedrock AI inference with other commercial models — Open Source Package source code, data in maintenance and support issues and internal troubleshooting, customer dashboard, customer artifacts (with customer approval)
3 Amazon S3 storage of open source package data — Open Source Package tarballs
4 Anthropic AI models and inference — Open Source Package source code, data in maintenance and support issues and internal troubleshooting, customer dashboard, customer artifacts (with customer approval)
5 Backblaze storage of open source package data — Open Source Package tarballs
6 ClickHouse, Inc organization alerts and analytics — Customer alert metadata
7 Datadog, Inc. used for system diagnostics — System Monitoring & Errors (Hosted application monitoring, product stack traces, customer entity Identifiers, application logs)
8 Functional Software, Inc (dba Sentry) We use this for tracing and error logging — Errors (Product stack traces, customer entity Identifiers)
9 GCP service infrastructure — Customer manifest files, SBOMs, generated alerts
10 HubSpot, Inc. organizing customer information and sales communications — Customer conversations, sales, contact info
11 Linear Orbit, Inc. (Linear) keeping track of customer issues and maintaining context while providing customer support — Tarballs of manifests
12 Mixpanel for measuring analytics on socket's public websites — Analytics
13 n8n GmbH (DBA n8n) Automation platform — Analytics, Customer conversations, sales, contact info
14 OpenAI AI models and inference — Open Source Package source code, data in maintenance and support issues and internal troubleshooting, customer dashboard, customer artifacts (with customer approval)
15 Plausible measuring traffic on Socket's public package pages — Analytics
16 README Documentation knowledge base — Documentation for socket
17 Sanity Used as a CMS — Blog posts, public content, announcements
18 Slack Technologies, LLC Communication around customer support issues; We have a feature to send notifications to users via slack as an opt-in method — Links to customer data, snippets, customer provided logs, zips, etc.., Scan alerts and notifications
19 Stripe, LLC. payment processing — Payment methods, invoices, etc.
20 Twitter posts social media messages about malware findings — Malware announcements and autogenerated news stories
21 Vanta Enabling customers to save alerts — Scan alerts and notifications
22 WorkOS to support SSO as a login method for socket.dev — SSO settings, user ids, user emails, user names
23 Zenduty paging support for incident response — Pages and support escalation

Get an email when Socket changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Socket free

Documents we track for Socket

Privacy policy
checked September 28, 2026 socket.dev ↗
Subprocessor list
checked September 28, 2026 socket.dev ↗
Terms of service
checked September 28, 2026 socket.dev ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Socket subprocessors FAQ

How many subprocessors does Socket use?
Socket lists 23 subprocessors on its published list, including ActiveCampaign, LLC (Postmark), Amazon Bedrock, Amazon S3, Anthropic, and Backblaze and 18 more.
When was Socket's subprocessor list last checked?
ClauseTrail last checked Socket's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Socket adds or removes a subprocessor?
ClauseTrail monitors Socket's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.