Twingate Subprocessors List (September 2026): Changes and History

Twingate names 33 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

Twingate subprocessors (September 2026)

# Subprocessor Purpose Location
1 Google LLC Provides infrastructure on which Twingate production systems, databases, and customer data are hosted. Provides corporate email, office apps, and file storage services. Google Cloud Platform also provides infrastructure on which the Twingate global relay network operates. United States
2 DigitalOcean, LLC Provides infrastructure for part of the Twingate global relay network United States
3 Amazon Web Services, Inc. Provides infrastructure for hosted connectors United States
4 FrontApp, Inc. Customer communications system United States
5 Elasticsearch, Inc. Database hosting and management United States
6 Functional Software, Inc. (Sentry) Application crash and error reporting United States
7 NextDNS, Inc. DNS-related security services United States
8 Mouseflow, Inc. Product user interface analytics United States
9 Twilio Inc. (Sendgrid) Email service provider United States
10 Proofpoint, Inc. Email security services United States
11 Intercom, Inc. Customer communications system United States
12 Pylon Labs, Inc. Customer communications system United States
13 Zendesk, Inc. Customer communications system United States
14 Linear Orbit, Inc. Customer support issue management United States
15 Slack Technologies, LLC Customer communications system United States
16 Microsoft Corporation Customer communications system (Microsoft Teams) and office apps United States
17 Zoom Video Communications, Inc. Customer communications system United States
18 WorkRamp, Inc. Customer learning management platform United States
19 Gong.io, Inc. Revenue intelligence platform United States
20 Vitally, Inc. Customer collaboration system United States
21 Hevo Data, Inc. Data extraction and transformation system United States
22 Anthropic PBC Artificial intelligence services United States
23 Dell Technologies Inc. (APEX Backup) Backup solution provider United States
24 Oyster HR, Inc. Supplemental technical support, engineering and consulting services United States
25 Ben Cameron Supplemental technical support Canada
26 Team Beam Technologies B.V. Engineering services The Netherlands
27 MWDN Ltd. Engineering services United Kingdom
28 ClemTech Pte Ltd Engineering services Singapore
29 Nitish Arora Revenue operations services India
30 Riya Pal Revenue operations services India
31 Regina Cruz Revenue operations services The Philippines
32 Joena Foronda Revenue operations services The Philippines
33 Twingate Israel Ltd. Part of the Twingate family of companies and considered a subprocessor who assists with providing services Israel

Get an email when Twingate changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Twingate free

Key DPA terms at Twingate

What Twingate's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification

Without undue delay, with no set deadline

“notify Customer without undue delay after becoming aware of a Personal Data Breach”
DPA, www.twingate.com ↗
Notice of a new subprocessor

10 days ahead

“Twingate will update the Subprocessor List at least 10 days before authorizing any New Subprocessor to process personal data in connection with the provision of the applicable Services”
DPA, www.twingate.com ↗
Transfers outside the EU

Standard contractual clauses and the EU–US Data Privacy Framework

“in relation to personal data that is protected by the EU GDPR, the EU SCCs will apply and are deemed completed as follows”
“a transfer of personal data to the United States pursuant to the Data Privacy Framework shall not be a Restricted Transfer”
DPA, www.twingate.com ↗
Customer data after the contract ends

Deleted or returned when the contract ends

“upon termination of the DPA or upon a request to delete or return personal data, delete (including by anonymization) or return all personal data”
DPA, www.twingate.com ↗
Audit rights

Once a year

“The audit right hereunder may be exercised once in a calendar year during the term of this DPA and in addition where it is reasonably suspected that a Personal Data Breach has occurred”
DPA, www.twingate.com ↗

Documents we track for Twingate

DPA
checked September 26, 2026 www.twingate.com ↗
Privacy policy
checked September 26, 2026 www.twingate.com ↗
Subprocessor list
checked September 26, 2026 www.twingate.com ↗
Terms of service
checked September 26, 2026 www.twingate.com ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Twingate subprocessors FAQ

How many subprocessors does Twingate use?
Twingate lists 33 subprocessors on its published list, including Google LLC, DigitalOcean, LLC, Amazon Web Services, Inc., FrontApp, Inc., and Elasticsearch, Inc. and 28 more.
Where does Twingate process customer data?
The subprocessors named by Twingate are located in United States, India, The Philippines, Canada, Israel, and Singapore and 2 other locations, as stated on its list.
How quickly does Twingate report a personal data breach to customers?
According to its DPA, Twingate reports a personal data breach to customers without undue delay, with no set deadline: “notify Customer without undue delay after becoming aware of a Personal Data Breach”
How much notice does Twingate give before adding a subprocessor?
Twingate's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Twingate will update the Subprocessor List at least 10 days before authorizing any New Subprocessor to process personal data in connection with the provision of the applicable Services”
How does Twingate transfer personal data outside the EU?
Twingate's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “in relation to personal data that is protected by the EU GDPR, the EU SCCs will apply and are deemed completed as follows”
When was Twingate's subprocessor list last checked?
ClauseTrail last checked Twingate's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when Twingate adds or removes a subprocessor?
ClauseTrail monitors Twingate's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.