Userlane Subprocessors List (September 2026): Changes and History
Userlane names 20 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Last checked September 28, 2026
Official source ↗
Userlane subprocessors (September 2026)
| # | Subprocessor | Purpose | Location | Data |
|---|---|---|---|---|
| 1 | Subscription Agreement / Terms of Service (hereinafter | “Main Contract”) and the Data | — | — |
| 2 | Protection Addendum (hereinafter | “DPA”) concluded between the parties. | — | — |
| 3 | Subprocessor | Data processed | Purpose of | Processing |
| 4 | Microsoft Ireland | All as defined in | Data Center | EU |
| 5 | Operations, Ltd. | Schedule 1 of the DPA | Management | — |
| 6 | Mailgun | Email addresses of | System relevant | EU |
| 7 | Technologies, | Admin Users; Email | — | |
| 8 | Inc. (Mailjet ) | addresses of End | communications (e.g. | — |
| 9 | Sentry 45 | All as defined in | Diagnose, fix | EU |
| 10 | Userlane GmbH St.-Martin-St+49 89 4141 711 71Board of directors | Bank account | 2 | — |
| 11 | 102 81669 Munich Germany | [email protected] Hahn | UniCredit-Hypovereinsbank | — |
| 12 | BIC | HYVEDEMM488 | — | — |
| 13 | Coassemble | Name, Email addresses of | Provision of online | Australia |
| 14 | Pty Ltd | Admin Users; | learning management | — |
| 15 | Planhat AB | Customer account, | Customer Success | EU |
| 16 | Amplitude, Inc - | Admin user identifiers | Product usage | EU |
| 17 | Analytics | user ID), user attributes | (e.g., feature adoption | — |
| 18 | *StackOne | Employee profile data | Attribute connector. | EU |
| 19 | Limited | source system | attributes from the | — |
| 20 | Userlane GmbH St.-Martin-Str+49 89 4141 711 71 Board of directors | Bank account | 2 | — |
Get an email when Userlane changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Key DPA terms at Userlane
What Userlane's data processing agreement commits to, with the sentence each answer comes from.
- Breach notification
-
Within 24 hours
“The Processor shall notify the Controller without undue delay and no later than 24 hours after becoming aware of any personal data breach affecting personal data processed on behalf of the Controller.”
DPA, www.userlane.com ↗ - Notice of a new subprocessor
-
30 days ahead
“The Processor shall notify the Customer in writing and in advance of any intended changes to the subprocessor list, including the addition or replacement of sub-processors, at least 30 days before the change becomes effective.”
DPA, www.userlane.com ↗ - Customer data after the contract ends
-
Deleted or returned when the contract ends
“Following termination of the Userlane Master Subscription Agreement, all personal data that is the object of this Agreement shall either be deleted or returned by the Processor, at the Customer's request, unless Union or Member State law requires storage of the personal data.”
DPA, www.userlane.com ↗ - Audit rights
-
On request
“If, on a case-by-case basis, it should become necessary for the Customer to inspect the technical organisational measures, such inspections will be conducted during normal working hours, without disturbance to operations, further to prior notification and allowing for an appropriate lead time.”
DPA, www.userlane.com ↗
Certifications at Userlane
What Userlane's trust page lists, with the text each one comes from.
- ISO 27001
-
Active · audited by TÜV SÜD
“Userlane's information security management system (ISMS), covering the development, operation, and support of its digital adoption platform, is certified to ISO/IEC 27001:2022 by TÜV SÜD.”
Trust page, www.userlane.com ↗
Documents we track for Userlane
- DPA
- checked September 28, 2026 www.userlane.com ↗
- Subprocessor list
- checked September 28, 2026 www.userlane.com ↗
- Trust page
- checked September 28, 2026 www.userlane.com ↗
Change history
Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
Userlane subprocessors FAQ
- How many subprocessors does Userlane use?
- Userlane lists 20 subprocessors on its published list, including Subscription Agreement / Terms of Service (hereinafter, Protection Addendum (hereinafter, Subprocessor, Microsoft Ireland, and Operations, Ltd. and 15 more.
- Where does Userlane process customer data?
- The subprocessors named by Userlane are located in 2, (e.g., Attribute connector., Customer Success, Data Center, and Diagnose and 12 other locations, as stated on its list.
- How quickly does Userlane report a personal data breach to customers?
- According to its DPA, Userlane reports a personal data breach to customers within 24 hours: “The Processor shall notify the Controller without undue delay and no later than 24 hours after becoming aware of any personal data breach affecting personal data processed on behalf of the Controller.”
- How much notice does Userlane give before adding a subprocessor?
- Userlane's DPA gives 30 days' notice of a new subprocessor, the time customers have to object: “The Processor shall notify the Customer in writing and in advance of any intended changes to the subprocessor list, including the addition or replacement of sub-processors, at least 30 days before the change becomes effective.”
- Which security certifications does Userlane list?
- Userlane's trust page lists ISO 27001.
- When was Userlane's subprocessor list last checked?
- ClauseTrail last checked Userlane's subprocessor list on September 28, 2026. Lists are re-checked daily.
- How do I find out when Userlane adds or removes a subprocessor?
- ClauseTrail monitors Userlane's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.