Torq Subprocessors List (September 2026): Changes and History
Torq names 25 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Last checked September 28, 2026
Official source ↗
Torq subprocessors (September 2026)
| # | Subprocessor | Purpose | Location | Data |
|---|---|---|---|---|
| 1 | Google LLC (Google Cloud Provider) | — | USA, EU (Germany), Japan | Data Hosting, including business intelligence |
| 2 | Amazon Web Services, Inc. | — | USA, EU (Ireland), Japan | Data Hosting, including business intelligence |
| 3 | Zendesk, Inc. | — | USA | Customer support ticketing |
| 4 | Atlassian Pty Ltd. | — | USA | Customer support ticketing |
| 5 | Functional Software, Inc. (Sentry) | — | USA | Error Tracking and performance monitoring for web UI |
| 6 | Intercom R&D Unlimited Company | — | USA | Customer service and communications |
| 7 | MailGun Technologies, Inc. | — | USA | Email notification services |
| 8 | Elasticsearch BV | — | USA | Search functionality |
| 9 | Slack Technologies, LLC | — | USA | Customer support and communications |
| 10 | Microsoft Corporation (Teams) | — | USA | Customer support and communications |
| 11 | Zoom Communications Inc. | — | USA | Customer support and communications |
| 12 | ReversingLabs | — | USA | Threat intelligence provider |
| 13 | Microsoft Corporation (Azure OpenAI) | — | USA, EU (France, Sweden), Japan | AI Model Provider |
| 14 | Google LLC (Vertex AI) | — | USA, EU (Germany), Japan | AI Model Provider |
| 15 | OpenAI, L.L.C.(OpenAI) | — | USA, EU, Japan | AI Model Provider |
| 16 | Amazon Web Services, Inc. (Amazon Bedrock) | — | USA, EU (Ireland), Japan | AI Model Provider |
| 17 | Torq Technologies Ltd. | — | Israel, EU (Poland) | — |
| 18 | Torq Technologies UK Limited | — | United Kingdom | — |
| 19 | Google Cloud EMEA Limited (Google Cloud Provider) | — | USA, EU (Germany), Japan | Data Hosting, incl. business intelligence |
| 20 | Amazon Web Services EMEA SARL (AWS) | — | USA, EU (Ireland), Japan | Data Hosting, incl. business intelligence |
| 21 | ReversingLabs International GmbH | — | USA | Threat intelligence provider |
| 22 | Google Cloud EMEA Limited (Vertex AI) | — | USA, EU (Germany), Japan | AI model provider |
| 23 | OpenAI Ireland Limited (OpenAI) | — | EU | AI model provider – for personal data subject to EU GDPR or Swiss FADP |
| 24 | OpenAI OpCo, L.L.C.(OpenAI) | — | USA, Japan | AI model provider – for personal data not subject to EU GDPR or Swiss FADP |
| 25 | Amazon Web Services EMEA SARL (AWS Bedrock) | — | USA, EU (Ireland), Japan | AI model provider |
Get an email when Torq changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Key DPA terms at Torq
What Torq's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?
- Breach notification
-
Without undue delay, with no set deadline
“Torq shall notify Customer without undue delay after becoming aware of any actual or reasonably suspected unlawful or accidental destruction, loss, alteration, or unauthorized disclosure of or access to Personal Data Processed by Torq on behalf of Customer”
DPA, torq.io ↗ - Notice of a new subprocessor
-
30 days ahead
“Customer may reasonably object to Torq's use of a new Sub-processor for reasons related to the protection of Personal Data intended to be Processed by such Sub-processor by notifying Torq promptly in writing within thirty (30) days after receipt of Torq's notice.”
DPA, torq.io ↗ - Transfers outside the EU
-
Standard contractual clauses and adequacy decisions
“the parties hereby enter into the EU SCCs as further set out in Appendix 2, which EU SCCs are hereby incorporated by reference and deemed an integral part hereof.”
“Personal Data may be transferred from the European Union Member States, the three European Economic Area member countries (Norway, Liechtenstein and Iceland) (collectively, "EEA"), the United Kingdom and Switzerland to countries that offer an adequate level of data protection pursuant to the adequacy decisions published by the relevant data protection authorities”
DPA, torq.io ↗ - Customer data after the contract ends
-
Deleted or returned when the contract ends
“Torq shall, at Customer's election, delete or return the Personal Data to Customer during and/or at the end of the provision of the Services, and shall delete existing copies unless applicable law requires storage of the Personal Data.”
DPA, torq.io ↗ - Audit rights
-
Once a year
“Customer may, no more than once annually during the term of the Agreement, and subject to providing Torq reasonable written notice of any audit, at least thirty (30) days in advance, conduct on-site audits to assess Torq's compliance with the terms of this DPA, at Customer's expense.”
DPA, torq.io ↗
Change history
Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Torq subprocessors FAQ
- How many subprocessors does Torq use?
- Torq lists 25 subprocessors on its published list, including Google LLC (Google Cloud Provider), Amazon Web Services, Inc., Zendesk, Inc., Atlassian Pty Ltd., and Functional Software, Inc. (Sentry) and 20 more.
- Where does Torq process customer data?
- The subprocessors named by Torq are located in USA, Japan, EU (Germany), EU (Ireland), EU, and EU (France and 4 other locations, as stated on its list.
- How quickly does Torq report a personal data breach to customers?
- According to its DPA, Torq reports a personal data breach to customers without undue delay, with no set deadline: “Torq shall notify Customer without undue delay after becoming aware of any actual or reasonably suspected unlawful or accidental destruction, loss, alteration, or unauthorized disclosure of or access to Personal Data Processed by Torq on behalf of Customer”
- How much notice does Torq give before adding a subprocessor?
- Torq's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “Customer may reasonably object to Torq's use of a new Sub-processor for reasons related to the protection of Personal Data intended to be Processed by such Sub-processor by notifying Torq promptly in writing within thirty (30) days after receipt of Torq's notice.”
- How does Torq transfer personal data outside the EU?
- Torq's DPA relies on standard contractual clauses and adequacy decisions: “the parties hereby enter into the EU SCCs as further set out in Appendix 2, which EU SCCs are hereby incorporated by reference and deemed an integral part hereof.”
- When was Torq's subprocessor list last checked?
- ClauseTrail last checked Torq's subprocessor list on September 28, 2026. Lists are re-checked daily.
- How do I find out when Torq adds or removes a subprocessor?
- ClauseTrail monitors Torq's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.