Spacelift Subprocessors List (November 2026): Changes and History
Spacelift names 11 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Spacelift subprocessors (November 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | HubSpot, Inc. | Marketing | US |
| 2 | Google LLC | Internal Email and File Storage | USA, EU |
| 3 | Amazon Web Services, Inc. | Cloud data storage, computing services | EU |
| 4 | Salesforce Inc. | Internal and External Instant Messaging | USA |
| 5 | Datadog, Inc. | SIEM solution | EU |
| 6 | SmartBear Software Inc. | Error reporting tool | USA |
| 7 | Twilio Inc. | Customer Data Platform, sending events data across systems | USA |
| 8 | OpenText Inc. | Salesforce Backup Tool | Canada |
| 9 | Outreach Corporation | Sales support platform | USA |
| 10 | Zenleads Inc. (d/b/a Apollo.io) | Sales support platform | USA |
| 11 | Cordnet OU | Processing feature requests | EU |
Get an email when Spacelift changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Certifications at Spacelift
What Spacelift's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?
- SOC 2 Type II
-
Active
“SOC2 Type II certification performed by an independent external auditor confirms the effectiveness of internal controls in terms of Spacelift security, availability, processing integrity, confidentiality, and privacy of customer data.”
Trust page, spacelift.io ↗ - FedRAMP
-
Active
“Spacelift is the first infrastructure-as-code (IaC) orchestration platform to receive FedRAMP authorization, delivering flexible, policy-driven automation to federal agencies and contractors seeking secure and compliant infrastructure workflows.”
Trust page, spacelift.io ↗
Documents we track for Spacelift
- Subprocessor list
- checked November 2, 2026 trust.spacelift.io ↗
- Trust page
- checked November 3, 2026 spacelift.io ↗
Change history
Tracking since October 17, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Spacelift subprocessors FAQ
- How many subprocessors does Spacelift use?
- Spacelift lists 11 subprocessors on its published list, including HubSpot, Inc., Google LLC, Amazon Web Services, Inc., Salesforce Inc., and Datadog, Inc. and 6 more.
- Where does Spacelift process customer data?
- The subprocessors named by Spacelift are located in USA, EU, Canada, and US, as stated on its list.
- Does Spacelift have a SOC 2 Type II report?
- Yes. Spacelift's trust page lists a SOC 2 Type II report: “SOC2 Type II certification performed by an independent external auditor confirms the effectiveness of internal controls in terms of Spacelift security, availability, processing integrity, confidentiality, and privacy of customer data.”
- Which security certifications does Spacelift list?
- Spacelift's trust page lists SOC 2 Type II and FedRAMP.
- When was Spacelift's subprocessor list last checked?
- ClauseTrail last checked Spacelift's subprocessor list on November 2, 2026. Lists are re-checked daily.
- How do I find out when Spacelift adds or removes a subprocessor?
- ClauseTrail monitors Spacelift's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.