Usercentrics Subprocessors List (November 2026): Changes and History
Usercentrics names 6 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Usercentrics subprocessors (November 2026)
| # | Subprocessor | Purpose | Location |
|---|---|---|---|
| 1 | Google Cloud Platform | Cloud provider | — |
| 2 | Microsoft Azure | Cloud provider | — |
| 3 | MongoDB Atlas | Data storage and processing | — |
| 4 | Salesforce | Sales | — |
| 5 | Zendesk | Customer support | — |
| 6 | Vanta | Continuous security and compliance monitoring | — |
Get an email when Usercentrics changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Certifications at Usercentrics
What Usercentrics's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?
- SOC 2 Type II
-
Active
“Usercentrics - 2026 SOC 2 Type 2 + HIPAA Report”
Trust page, trust.usercentrics.com ↗ - ISO 27001
-
Active
“ISO 27001:2022”
Trust page, trust.usercentrics.com ↗ - ISO 27701
-
Active
“ISO27701:2019”
Trust page, trust.usercentrics.com ↗ - HIPAA
-
Active
“Usercentrics - 2026 SOC 2 Type 2 + HIPAA Report”
Trust page, trust.usercentrics.com ↗
Documents we track for Usercentrics
- Privacy policy
- checked November 3, 2026 changed September 30, 2026 usercentrics.com ↗
- Subprocessor list
- checked November 3, 2026 trust.usercentrics.com ↗
- Terms of service
- checked November 3, 2026 usercentrics.com ↗
- Trust page
- checked November 3, 2026 changed October 30, 2026 trust.usercentrics.com ↗
Change history
-
Certification changed
Usercentrics now lists HIPAA on its trust page.
-
Certification changed
Usercentrics now lists SOC 2 Type II on its trust page.
-
Certification changed
Usercentrics now lists ISO 27001 on its trust page.
-
Privacy policy changed
Usercentrics added a new third-party recipient, OpenAI (ChatGPT Ads), used for account-based marketing and targeted advertising, sharing IP address, device and website visit details for re-engagement ads shown in ChatGPT, transferred outside the EU/EEA under standard contractual clauses; the policy also now describes cookies used for marketing/advertising purposes in addition to analytics, and the 'last update' date moved from September 4, 2026 to September 29, 2026.
Tracking since October 14, 2026. Every change links to the two versions of the document it came from. All vendors' changes →
Usercentrics subprocessors FAQ
- How many subprocessors does Usercentrics use?
- Usercentrics lists 6 subprocessors on its published list, including Google Cloud Platform, Microsoft Azure, MongoDB Atlas, Salesforce, and Zendesk and 1 more.
- Does Usercentrics have a SOC 2 Type II report?
- Yes. Usercentrics's trust page lists a SOC 2 Type II report: “Usercentrics - 2026 SOC 2 Type 2 + HIPAA Report”
- Which security certifications does Usercentrics list?
- Usercentrics's trust page lists SOC 2 Type II, ISO 27001, ISO 27701, and HIPAA.
- When was Usercentrics's subprocessor list last checked?
- ClauseTrail last checked Usercentrics's subprocessor list on November 3, 2026. Lists are re-checked daily.
- How do I find out when Usercentrics adds or removes a subprocessor?
- ClauseTrail monitors Usercentrics's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.