How many subprocessors does Whatfix use?

Whatfix lists 13 subprocessors on its published list, including Microsoft Azure, Cloudflare, Datadog, Descope, and Zendesk and 8 more.

Where does Whatfix process customer data?

The subprocessors named by Whatfix are located in United States of America, United States, Germany, India, Ireland, and Switzerland, as stated on its list.

Does Whatfix use customer data to train AI models?

According to its AI terms, Whatfix does not use customer data to train AI models: “Whatfix shall use AI model providers that are contractually prohibited from using customer content to train or improve their general-purpose AI models.”

Which AI model providers does Whatfix send customer data to?

Anthropic (Computer Use tool), Azure OpenAI, Future AGI, and Google Cloud Platform (Vertex AI, Claude, Anthropic's Computer Use tool) are named in Whatfix's AI terms: “Google Cloud Platform (Vertex AI, Claude, Anthropic's Computer Use tool) | AI services for automating flow creation and improving task automation | User prompts, screenshots, and input documents”

Which security certifications does Whatfix list?

Whatfix's trust page lists ISO 27001, ISO 27701, ISO 42001, HIPAA, EU–US Data Privacy Framework, and CSA STAR.

When was Whatfix's subprocessor list last checked?

ClauseTrail last checked Whatfix's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when Whatfix adds or removes a subprocessor?

ClauseTrail monitors Whatfix's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Whatfix Subprocessors List (September 2026): Changes and History

Whatfix names 13 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Whatfix subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Microsoft Azure	Hosting Providers	United States, Switzerland, Ireland
2	Cloudflare	IT infrastructure	United States of America
3	Datadog	Infra Monitoring Providers	United States, Germany
4	Descope	Identity Providers	United States, Germany
5	Zendesk	Customer Service	United States of America
6	Mindtickle	Collaboration	United States of America
7	Salesforce	Sales	United States of America
8	Infobeans	Others	India
9	GCP	AI subprocessor - Artificial Intelligence	United States of America
10	Anthropic	AI subprocessor - Artificial Intelligence	United States of America
11	OpenAI	AI subprocessor - Artificial Intelligence	United States of America
12	Whatfix	Customer Service	India
13	Future AGI	AI subprocessor - Artificial Intelligence	United States, Germany

Get an email when Whatfix changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Whatfix free

AI and customer data at Whatfix

What Whatfix's own documents say, with the sentence each answer comes from.

Trains AI models on customer data: No

“Whatfix shall use AI model providers that are contractually prohibited from using customer content to train or improve their general-purpose AI models.”
AI terms, legal.whatfix.com ↗
Sends customer data to AI model providers: Yes: Anthropic (Computer Use tool), Azure OpenAI, Future AGI, and Google Cloud Platform (Vertex AI, Claude, Anthropic's Computer Use tool)

“Whatfix may, as necessary to provide the requested functionality, securely transmit customer content, including incidental personal data, to authorized AI model providers acting as sub-processors.”
AI terms, legal.whatfix.com ↗
How to opt out: Not stated in the documents we track.
How long AI features keep data: Whatfix may retain Customer Content, including Personal Data, for up to two years after termination to enable customer access, export, and account recovery.

“Upon termination or expiry of the Terms, Whatfix may retain Customer Content, including Personal Data, for up to two (2) years to enable Customer access, export, and account recovery.”
AI terms, legal.whatfix.com ↗

Certifications at Whatfix

What Whatfix's trust page lists, with the text each one comes from.

ISO 27001: Active

“ISO 27001 v2022”
Trust page, trust.whatfix.com ↗
ISO 27701: Active

“ISO 27701”
Trust page, trust.whatfix.com ↗
ISO 42001: Active

“ISO 42001”
Trust page, trust.whatfix.com ↗
HIPAA: Active

“HIPAA”
Trust page, trust.whatfix.com ↗
EU–US Data Privacy Framework: Active

“EU_US Data Privacy Framework”
Trust page, trust.whatfix.com ↗
CSA STAR: Active

“CSA Star”
Trust page, trust.whatfix.com ↗

Documents we track for Whatfix

AI terms: checked September 28, 2026 legal.whatfix.com ↗
DPA: checked September 28, 2026 legal.whatfix.com ↗
Privacy policy: checked September 28, 2026 whatfix.com ↗
Subprocessor list: checked September 28, 2026 trust.whatfix.com ↗
Terms of service: checked September 28, 2026 website.whatfix.com ↗
Trust page: checked September 28, 2026 trust.whatfix.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Whatfix subprocessors FAQ

How many subprocessors does Whatfix use?: Whatfix lists 13 subprocessors on its published list, including Microsoft Azure, Cloudflare, Datadog, Descope, and Zendesk and 8 more.
Where does Whatfix process customer data?: The subprocessors named by Whatfix are located in United States of America, United States, Germany, India, Ireland, and Switzerland, as stated on its list.
Does Whatfix use customer data to train AI models?: According to its AI terms, Whatfix does not use customer data to train AI models: “Whatfix shall use AI model providers that are contractually prohibited from using customer content to train or improve their general-purpose AI models.”
Which AI model providers does Whatfix send customer data to?: Anthropic (Computer Use tool), Azure OpenAI, Future AGI, and Google Cloud Platform (Vertex AI, Claude, Anthropic's Computer Use tool) are named in Whatfix's AI terms: “Google Cloud Platform (Vertex AI, Claude, Anthropic's Computer Use tool) | AI services for automating flow creation and improving task automation | User prompts, screenshots, and input documents”
Which security certifications does Whatfix list?: Whatfix's trust page lists ISO 27001, ISO 27701, ISO 42001, HIPAA, EU–US Data Privacy Framework, and CSA STAR.
When was Whatfix's subprocessor list last checked?: ClauseTrail last checked Whatfix's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Whatfix adds or removes a subprocessor?: ClauseTrail monitors Whatfix's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.