How many subprocessors does Tines use?

Tines lists 11 subprocessors on its published list, including AWS, AWS Bedrock, Cloudflare Inc, Google Cloud Platform (Google LLC), and Intercom and 6 more.

Where does Tines process customer data?

The subprocessors named by Tines are located in USA, Ireland, Australia (Sydney), Customer-selected AWS region, Ireland (Dublin), and Sweden (Stockholm) and 9 other locations, as stated on its list.

How quickly does Tines report a personal data breach to customers?

According to its DPA, Tines reports a personal data breach to customers within 72 hours: “notify the Customer without undue delay (and in any event not later than 72 (seventy-two hours) upon becoming aware of any personal data breach”

How much notice does Tines give before adding a subprocessor?

Tines's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “If the Customer objects to the appointment of an additional Sub-processor within thirty (30) calendar days of such notice on reasonable grounds relating to the protection of Customer Personal Data”

How does Tines transfer personal data outside the EU?

Tines's DPA relies on standard contractual clauses and adequacy decisions: “to the extent that such a transfer is pursuant to the SCCs, that such transfer is subject to Module 4 of the SCCs, where Tines acts as a processor of Customer Personal Data for the purposes of the Services”

Does Tines have a SOC 2 Type II report?

Yes. Tines's trust page lists a SOC 2 Type II report: “SOC2 Type II Report”

Which security certifications does Tines list?

Tines's trust page lists SOC 2 Type II.

When was Tines's subprocessor list last checked?

ClauseTrail last checked Tines's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when Tines adds or removes a subprocessor?

ClauseTrail monitors Tines's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Tines Subprocessors List (September 2026): Changes and History

Tines names 11 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Tines subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	AWS	Cloud infrastructure and data	Customer-selected AWS region, typically one of: Japan (Tokyo), Australia (Sydney), Switzerland (Zurich), Ireland (Dublin), Sweden (Stockholm), United Kingdom (London), or United States (Oregon)
2	AWS Bedrock	Hosting AI models (Tines-hosted or customer models)	Customer-selected AWS region, typically one of: Japan (Tokyo), Australia (Sydney), Switzerland (Zurich), Ireland (Dublin), Sweden (Stockholm), United Kingdom (London), or United States (Oregon)
3	Cloudflare Inc	Network infrastructure and secure tunnel routing	USA
4	Google Cloud Platform (Google LLC)	Provision of cloud infrastructure services including hosting, storage and processing of customer analytics and usage data	United States
5	Intercom	User database management, chatbot support	USA, Ireland
6	OpenAI	AI model processing and inference for automated workflows and natural language features	United States, Ireland, UK
7	Plain	Customer support / ticketing	USA, UK
8	Salesforce (SFDC)	CRM, pipeline management, lead scoring	USA, Germany, France, Japan
9	Snowflake	Data warehouse services	Ireland
10	Stripe	Consumption billing for Tines-hosted AI model	USA, Ireland
11	Zendesk	Customer support and ticketing	USA, Ireland

Get an email when Tines changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Tines free

Key DPA terms at Tines

What Tines's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 72 hours

“notify the Customer without undue delay (and in any event not later than 72 (seventy-two hours) upon becoming aware of any personal data breach”
DPA, www.tines.com ↗
Notice of a new subprocessor: 30 days ahead

“If the Customer objects to the appointment of an additional Sub-processor within thirty (30) calendar days of such notice on reasonable grounds relating to the protection of Customer Personal Data”
DPA, www.tines.com ↗
Transfers outside the EU: Standard contractual clauses and adequacy decisions

“to the extent that such a transfer is pursuant to the SCCs, that such transfer is subject to Module 4 of the SCCs, where Tines acts as a processor of Customer Personal Data for the purposes of the Services”

“carried out to a country in respect of which the European Commission has issued a finding of adequacy for the protection of personal data including, without limitation, the UK, Japan, Switzerland and Canada”
DPA, www.tines.com ↗
Customer data after the contract ends: Deleted within 180 days of the contract ending

“Customer Personal Data will be deleted from production within 180 days”
DPA, www.tines.com ↗
Audit rights: On request

“Customer shall provide at least 14 days' prior written notice of its intention to carry out an audit”
DPA, www.tines.com ↗

Certifications at Tines

What Tines's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“SOC2 Type II Report”
Trust page, www.tines.com ↗

Documents we track for Tines

DPA: checked September 28, 2026 www.tines.com ↗
Privacy policy: checked September 28, 2026 www.tines.com ↗
Subprocessor list: checked September 28, 2026 www.tines.com ↗
Terms of service: checked September 28, 2026 www.tines.com ↗
Trust page: checked September 28, 2026 www.tines.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Tines subprocessors FAQ

How many subprocessors does Tines use?: Tines lists 11 subprocessors on its published list, including AWS, AWS Bedrock, Cloudflare Inc, Google Cloud Platform (Google LLC), and Intercom and 6 more.
Where does Tines process customer data?: The subprocessors named by Tines are located in USA, Ireland, Australia (Sydney), Customer-selected AWS region, Ireland (Dublin), and Sweden (Stockholm) and 9 other locations, as stated on its list.
How quickly does Tines report a personal data breach to customers?: According to its DPA, Tines reports a personal data breach to customers within 72 hours: “notify the Customer without undue delay (and in any event not later than 72 (seventy-two hours) upon becoming aware of any personal data breach”
How much notice does Tines give before adding a subprocessor?: Tines's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “If the Customer objects to the appointment of an additional Sub-processor within thirty (30) calendar days of such notice on reasonable grounds relating to the protection of Customer Personal Data”
How does Tines transfer personal data outside the EU?: Tines's DPA relies on standard contractual clauses and adequacy decisions: “to the extent that such a transfer is pursuant to the SCCs, that such transfer is subject to Module 4 of the SCCs, where Tines acts as a processor of Customer Personal Data for the purposes of the Services”
Does Tines have a SOC 2 Type II report?: Yes. Tines's trust page lists a SOC 2 Type II report: “SOC2 Type II Report”
Which security certifications does Tines list?: Tines's trust page lists SOC 2 Type II.
When was Tines's subprocessor list last checked?: ClauseTrail last checked Tines's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Tines adds or removes a subprocessor?: ClauseTrail monitors Tines's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.