Twingate Subprocessors List (September 2026): Changes and History
Twingate names 33 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Twingate subprocessors (September 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Google LLC | Provides infrastructure on which Twingate production systems, databases, and customer data are hosted. Provides corporate email, office apps, and file storage services. Google Cloud Platform also provides infrastructure on which the Twingate global relay network operates. | United States |
| 2 | DigitalOcean, LLC | Provides infrastructure for part of the Twingate global relay network | United States |
| 3 | Amazon Web Services, Inc. | Provides infrastructure for hosted connectors | United States |
| 4 | FrontApp, Inc. | Customer communications system | United States |
| 5 | Elasticsearch, Inc. | Database hosting and management | United States |
| 6 | Functional Software, Inc. (Sentry) | Application crash and error reporting | United States |
| 7 | NextDNS, Inc. | DNS-related security services | United States |
| 8 | Mouseflow, Inc. | Product user interface analytics | United States |
| 9 | Twilio Inc. (Sendgrid) | Email service provider | United States |
| 10 | Proofpoint, Inc. | Email security services | United States |
| 11 | Intercom, Inc. | Customer communications system | United States |
| 12 | Pylon Labs, Inc. | Customer communications system | United States |
| 13 | Zendesk, Inc. | Customer communications system | United States |
| 14 | Linear Orbit, Inc. | Customer support issue management | United States |
| 15 | Slack Technologies, LLC | Customer communications system | United States |
| 16 | Microsoft Corporation | Customer communications system (Microsoft Teams) and office apps | United States |
| 17 | Zoom Video Communications, Inc. | Customer communications system | United States |
| 18 | WorkRamp, Inc. | Customer learning management platform | United States |
| 19 | Gong.io, Inc. | Revenue intelligence platform | United States |
| 20 | Vitally, Inc. | Customer collaboration system | United States |
| 21 | Hevo Data, Inc. | Data extraction and transformation system | United States |
| 22 | Anthropic PBC | Artificial intelligence services | United States |
| 23 | Dell Technologies Inc. (APEX Backup) | Backup solution provider | United States |
| 24 | Oyster HR, Inc. | Supplemental technical support, engineering and consulting services | United States |
| 25 | Ben Cameron | Supplemental technical support | Canada |
| 26 | Team Beam Technologies B.V. | Engineering services | The Netherlands |
| 27 | MWDN Ltd. | Engineering services | United Kingdom |
| 28 | ClemTech Pte Ltd | Engineering services | Singapore |
| 29 | Nitish Arora | Revenue operations services | India |
| 30 | Riya Pal | Revenue operations services | India |
| 31 | Regina Cruz | Revenue operations services | The Philippines |
| 32 | Joena Foronda | Revenue operations services | The Philippines |
| 33 | Twingate Israel Ltd. | Part of the Twingate family of companies and considered a subprocessor who assists with providing services | Israel |
Get an email when Twingate changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Key DPA terms at Twingate
What Twingate's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?
- Breach notification
-
Without undue delay, with no set deadline
“notify Customer without undue delay after becoming aware of a Personal Data Breach”
DPA, www.twingate.com ↗ - Notice of a new subprocessor
-
10 days ahead
“Twingate will update the Subprocessor List at least 10 days before authorizing any New Subprocessor to process personal data in connection with the provision of the applicable Services”
DPA, www.twingate.com ↗ - Transfers outside the EU
-
Standard contractual clauses and the EU–US Data Privacy Framework
“in relation to personal data that is protected by the EU GDPR, the EU SCCs will apply and are deemed completed as follows”
“a transfer of personal data to the United States pursuant to the Data Privacy Framework shall not be a Restricted Transfer”
DPA, www.twingate.com ↗ - Customer data after the contract ends
-
Deleted or returned when the contract ends
“upon termination of the DPA or upon a request to delete or return personal data, delete (including by anonymization) or return all personal data”
DPA, www.twingate.com ↗ - Audit rights
-
Once a year
“The audit right hereunder may be exercised once in a calendar year during the term of this DPA and in addition where it is reasonably suspected that a Personal Data Breach has occurred”
DPA, www.twingate.com ↗
Documents we track for Twingate
- DPA
- checked September 26, 2026 www.twingate.com ↗
- Privacy policy
- checked September 26, 2026 www.twingate.com ↗
- Subprocessor list
- checked September 26, 2026 www.twingate.com ↗
- Terms of service
- checked September 26, 2026 www.twingate.com ↗
Change history
Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Twingate subprocessors FAQ
- How many subprocessors does Twingate use?
- Twingate lists 33 subprocessors on its published list, including Google LLC, DigitalOcean, LLC, Amazon Web Services, Inc., FrontApp, Inc., and Elasticsearch, Inc. and 28 more.
- Where does Twingate process customer data?
- The subprocessors named by Twingate are located in United States, India, The Philippines, Canada, Israel, and Singapore and 2 other locations, as stated on its list.
- How quickly does Twingate report a personal data breach to customers?
- According to its DPA, Twingate reports a personal data breach to customers without undue delay, with no set deadline: “notify Customer without undue delay after becoming aware of a Personal Data Breach”
- How much notice does Twingate give before adding a subprocessor?
- Twingate's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “Twingate will update the Subprocessor List at least 10 days before authorizing any New Subprocessor to process personal data in connection with the provision of the applicable Services”
- How does Twingate transfer personal data outside the EU?
- Twingate's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “in relation to personal data that is protected by the EU GDPR, the EU SCCs will apply and are deemed completed as follows”
- When was Twingate's subprocessor list last checked?
- ClauseTrail last checked Twingate's subprocessor list on September 26, 2026. Lists are re-checked daily.
- How do I find out when Twingate adds or removes a subprocessor?
- ClauseTrail monitors Twingate's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.