How many subprocessors does Tailscale use?

Tailscale lists 10 subprocessors on its published list, including Amazon Web Services, Inc., DigitalOcean, LLC, Hetzner Online GmbH, Akamai Technologies, Inc. (Linode), and Snowflake Inc. and 5 more.

Where does Tailscale process customer data?

The subprocessors named by Tailscale are located in United States and European Economic Area, as stated on its list.

Does Tailscale use customer data to train AI models?

According to its terms of service, Tailscale uses customer data to train AI models unless customers opt out: “Tailscale will not use, and will not allow third parties to use, Customer Data, Customer AI Content, or PAM Data to train generative artificial intelligence models, large language models, or other foundation models, except where such processing is performed solely for Customer's benefit in connection with the Services and with Customer's prior consent.”

How quickly does Tailscale report a personal data breach to customers?

According to its DPA, Tailscale reports a personal data breach to customers within 72 hours: “We will notify you without undue delay (and in any event within seventy-two (72) hours) of any known breach of security leading to the accidental, unauthorized or unlawful destruction, loss, alteration, disclosure of, or access to, Personal Data stored or otherwise Processed in connection with the Services (a "Data Breach").”

How much notice does Tailscale give before adding a subprocessor?

Tailscale's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “At least ten (10) days before enabling any new third party Subprocessor to access or participate in the Processing of Personal Data, we will update the Subprocessor Page and provide notice of the change.”

How does Tailscale transfer personal data outside the EU?

Tailscale's DPA relies on standard contractual clauses: “To the extent legally required, the EU SCCs form part of this DPA and will be deemed completed as set forth in Schedule A.”

When was Tailscale's subprocessor list last checked?

ClauseTrail last checked Tailscale's subprocessor list on November 3, 2026. Lists are re-checked daily.

How do I find out when Tailscale adds or removes a subprocessor?

ClauseTrail monitors Tailscale's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Tailscale Subprocessors List (November 2026): Changes and History

Tailscale names 10 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 3, 2026 Official source ↗

Tailscale subprocessors (November 2026)

#	Subprocessor	Purpose	Location	Data
1	Amazon Web Services, Inc.	Cloud hosting provider; AI model hosting and processing for certain PAM features	United States, European Economic Area	Client device and node information, Configuration information, Customer AI Content (1), PAM Data (3)
2	DigitalOcean, LLC	Cloud hosting provider for DERP servers (2)	United States, European Economic Area	Client device and node information, Configuration information
3	Hetzner Online GmbH	Cloud hosting provider for DERP servers (2)	United States, European Economic Area	Client device and node information, Configuration information
4	Akamai Technologies, Inc. (Linode)	Cloud hosting provider for DERP servers (2)	United States	Client device and node information, Configuration information
5	Snowflake Inc.	Cloud-based data warehouse	United States	Client device and node information, Configuration information
6	The Constant Company, LLC (Vultr)	Cloud hosting provider for DERP servers (2)	United States, European Economic Area	Client device and node information, Configuration information
7	NetActuate, Inc.	Cloud hosting provider for DERP servers (2)	United States	Client device and node information, Configuration information
8	Atlassian Corporation (Jira Service Management)	Troubleshooting	United States	Contact information
9	Vercel Inc.	Cloud hosting provider; AI gateway	United States	Client device and node information, Configuration information, Customer AI Content (1)
10	OpenAI	AI model provider for certain PAM features	United States	PAM Data(3)

Get an email when Tailscale changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Tailscale free

AI and customer data at Tailscale

What Tailscale's own documents say, with the sentence each answer comes from.

Trains AI models on customer data: Yes, unless you opt out

“Tailscale will not use, and will not allow third parties to use, Customer Data, Customer AI Content, or PAM Data to train generative artificial intelligence models, large language models, or other foundation models, except where such processing is performed solely for Customer's benefit in connection with the Services and with Customer's prior consent.”
Terms of service, tailscale.com ↗
Sends customer data to AI model providers: Yes

“When you use Aperture, content that may include your information is forwarded to the third-party AI/LLM providers selected or configured by you or your organization.”
Privacy policy, tailscale.com ↗
How to opt out: Training on customer content only occurs if the customer gives prior consent for processing performed solely for its own benefit; otherwise Tailscale does not use customer data to train AI models.

“except where such processing is performed solely for Customer's benefit in connection with the Services and with Customer's prior consent”
Terms of service, tailscale.com ↗

Key DPA terms at Tailscale

What Tailscale's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 72 hours

“We will notify you without undue delay (and in any event within seventy-two (72) hours) of any known breach of security leading to the accidental, unauthorized or unlawful destruction, loss, alteration, disclosure of, or access to, Personal Data stored or otherwise Processed in connection with the Services (a "Data Breach").”
DPA, tailscale.com ↗
Notice of a new subprocessor: 10 days ahead

“At least ten (10) days before enabling any new third party Subprocessor to access or participate in the Processing of Personal Data, we will update the Subprocessor Page and provide notice of the change.”
DPA, tailscale.com ↗
Transfers outside the EU: Standard contractual clauses

“To the extent legally required, the EU SCCs form part of this DPA and will be deemed completed as set forth in Schedule A.”
DPA, tailscale.com ↗
Customer data after the contract ends: Deleted within 30 days of the contract ending

“Tailscale will return or destroy Personal Data upon your request and within thirty (30) days of termination or expiration of the Agreement.”
DPA, tailscale.com ↗
Audit rights: Through certifications and audit reports only

“You agree that such third party reports and certifications are sufficient to demonstrate our compliance with the obligations set out in this DPA.”
DPA, tailscale.com ↗

Documents we track for Tailscale

DPA: checked November 3, 2026 tailscale.com ↗
Privacy policy: checked November 3, 2026 tailscale.com ↗
Subprocessor list: checked November 3, 2026 tailscale.com ↗
Terms of service: checked November 3, 2026 tailscale.com ↗

Change history

Tracking since October 14, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Tailscale subprocessors FAQ

How many subprocessors does Tailscale use?: Tailscale lists 10 subprocessors on its published list, including Amazon Web Services, Inc., DigitalOcean, LLC, Hetzner Online GmbH, Akamai Technologies, Inc. (Linode), and Snowflake Inc. and 5 more.
Where does Tailscale process customer data?: The subprocessors named by Tailscale are located in United States and European Economic Area, as stated on its list.
Does Tailscale use customer data to train AI models?: According to its terms of service, Tailscale uses customer data to train AI models unless customers opt out: “Tailscale will not use, and will not allow third parties to use, Customer Data, Customer AI Content, or PAM Data to train generative artificial intelligence models, large language models, or other foundation models, except where such processing is performed solely for Customer's benefit in connection with the Services and with Customer's prior consent.”
How quickly does Tailscale report a personal data breach to customers?: According to its DPA, Tailscale reports a personal data breach to customers within 72 hours: “We will notify you without undue delay (and in any event within seventy-two (72) hours) of any known breach of security leading to the accidental, unauthorized or unlawful destruction, loss, alteration, disclosure of, or access to, Personal Data stored or otherwise Processed in connection with the Services (a "Data Breach").”
How much notice does Tailscale give before adding a subprocessor?: Tailscale's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “At least ten (10) days before enabling any new third party Subprocessor to access or participate in the Processing of Personal Data, we will update the Subprocessor Page and provide notice of the change.”
How does Tailscale transfer personal data outside the EU?: Tailscale's DPA relies on standard contractual clauses: “To the extent legally required, the EU SCCs form part of this DPA and will be deemed completed as set forth in Schedule A.”
When was Tailscale's subprocessor list last checked?: ClauseTrail last checked Tailscale's subprocessor list on November 3, 2026. Lists are re-checked daily.
How do I find out when Tailscale adds or removes a subprocessor?: ClauseTrail monitors Tailscale's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.