disclosedby
Dated quotes of GDPR art. 28 subprocessor lists: who lists whom, what changed, and when.
View on disclosedby.comTry this MCPSponsored
Hosted MCP Server
npx add-mcp 'https://disclosedby.com/api/mcp'Installs into Claude Code, Codex, Cursor and more
Documentation
Who processes whose data, on the record
For DPOs and privacy teams: the GDPR art. 28 subprocessor lists of 254 companies, each row a dated quote, with what changed and when. Read to 2026-09-24.
companies with a list read
254
entries quoted
7,555
subprocessors with a page
498
changes on record
4,599
Watch your vendors When one of your vendors changes who handles your data, the change reaches you as the record holds it: the rows added and removed, quoted and dated.
The lists read
| Company | Entries | Read | Dates its own list |
|---|---|---|---|
| Iron Mountain | 693 | 2026-09-24 | yes |
 Workday | 549 | 2026-09-21 | yes |
 Salesforce | 252 | 2026-09-21 | yes |
 Deloitte | 179 | 2026-09-21 | yes |
 Microsoft | 166 | 2026-09-21 | yes |
| LexisNexis Risk Solutions | 114 | 2026-09-23 | yes |
 Google | 105 | 2026-09-21 | yes |
 Palo Alto Networks | 96 | 2026-09-21 | yes |
 RingCentral | 95 | 2026-09-21 | yes |
 Sprinklr | 90 | 2026-09-21 | yes |
 Qualtrics | 88 | 2026-09-21 | no |
 Rackspace | 86 | 2026-09-21 | yes |
 Cisco | 83 | 2026-09-21 | yes |
 Proofpoint | 76 | 2026-09-21 | yes |
 Lob | 67 | 2026-09-21 | yes |
| Digital Realty | 66 | 2026-09-24 | no |
 Docusign | 65 | 2026-09-21 | yes |
 Mailgun | 64 | 2026-09-21 | no |
 Mailjet | 64 | 2026-09-21 | no |
 Sinch | 64 | 2026-09-21 | no |
 ServiceNow | 59 | 2026-09-21 | no |
 Smartsheet | 59 | 2026-09-21 | no |
| Spotler | 56 | 2026-09-24 | yes |
 Adobe | 54 | 2026-09-21 | yes |
 Drata | 52 | 2026-09-21 | no |
 Figma | 48 | 2026-09-21 | yes |
| Genesys | 48 | 2026-09-23 | no |
 GitLab | 48 | 2026-09-21 | no |
 Deepgram | 45 | 2026-09-21 | no |
 Okta | 45 | 2026-09-21 | yes |
 PagerDuty | 45 | 2026-09-21 | no |
 monday.com | 44 | 2026-09-21 | yes |
 LinkedIn | 43 | 2026-09-21 | yes |
 Recraft | 43 | 2026-09-21 | yes |
 Sophos | 43 | 2026-09-21 | yes |
 Sendbird | 42 | 2026-09-21 | yes |
 Stripe | 42 | 2026-09-21 | yes |
 Atlassian | 41 | 2026-09-21 | yes |
 Contentsquare | 38 | 2026-09-21 | yes |
 Heap | 38 | 2026-09-21 | yes |
 Vanta | 38 | 2026-09-21 | no |
 Redis | 37 | 2026-09-21 | yes |
 Webflow | 37 | 2026-09-21 | yes |
 Gainsight | 36 | 2026-09-21 | yes |
 Twilio | 36 | 2026-09-21 | yes |
 Intercom | 35 | 2026-09-21 | yes |
 Backblaze | 34 | 2026-09-21 | yes |
 DigitalOcean | 33 | 2026-09-21 | yes |
 Linear | 33 | 2026-09-21 | no |
 Notion | 33 | 2026-09-21 | yes |
 Together AI | 33 | 2026-09-21 | no |
 Windsurf | 33 | 2026-09-21 | yes |
 Zapier | 33 | 2026-09-21 | yes |
 Dell | 32 | 2026-09-21 | yes |
 LiveKit | 32 | 2026-09-21 | yes |
 Outreach | 32 | 2026-09-21 | yes |
| Plain | 32 | 2026-09-23 | no |
 Pusher | 32 | 2026-09-21 | yes |
 Zendesk | 32 | 2026-09-21 | yes |
 Bird | 31 | 2026-09-21 | yes |
| Moveworks | 31 | 2026-09-24 | yes |
| Paddle | 31 | 2026-09-24 | no |
 Ada | 30 | 2026-09-21 | yes |
 Metabase | 30 | 2026-09-21 | no |
 Typeform | 30 | 2026-09-21 | no |
 Dialpad | 29 | 2026-09-21 | no |
| ZoomInfo | 29 | 2026-09-24 | yes |
 Baseten | 28 | 2026-09-21 | no |
 ElevenLabs | 28 | 2026-09-21 | no |
 FreedomPay | 28 | 2026-09-21 | no |
 Vercel | 28 | 2026-09-21 | no |
 Chargebee | 27 | 2026-09-21 | yes |
 Freshworks | 27 | 2026-09-21 | yes |
 Higher Logic | 27 | 2026-09-21 | yes |
 Honeycomb | 27 | 2026-09-21 | no |
 Klaviyo | 27 | 2026-09-21 | yes |
| Runway | 27 | 2026-09-23 | no |
 Modal | 26 | 2026-09-21 | no |
| Userlist | 26 | 2026-09-23 | no |
 Wiz | 26 | 2026-09-21 | yes |
 Avalara | 25 | 2026-09-21 | yes |
 GitHub | 25 | 2026-09-21 | no |
 LaunchDarkly | 25 | 2026-09-21 | yes |
 Mailchimp | 25 | 2026-09-21 | yes |
 WorkOS | 25 | 2026-09-21 | no |
| Zight | 25 | 2026-09-23 | no |
 Airtable | 24 | 2026-09-21 | yes |
| Apollo.io | 24 | 2026-09-23 | no |
 Asana | 24 | 2026-09-21 | yes |
 OpenAI | 24 | 2026-09-21 | yes |
| You.com | 24 | 2026-09-23 | no |
 Zoom | 24 | 2026-09-21 | yes |
 Daily | 23 | 2026-09-21 | yes |
 Decagon | 23 | 2026-09-21 | no |
 Fivetran | 23 | 2026-09-21 | yes |
| MacStadium | 23 | 2026-09-23 | no |
 Mistral AI | 23 | 2026-09-21 | no |
 Netlify | 23 | 2026-09-21 | no |
 Perplexity | 23 | 2026-09-21 | no |
 Supabase | 23 | 2026-09-21 | yes |
 Pylon | 23 | 2026-09-21 | yes |
 Resend | 22 | 2026-09-21 | yes |
 Scale AI | 22 | 2026-09-21 | yes |
| xAI | 22 | 2026-09-23 | no |
 Aiven | 21 | 2026-09-21 | yes |
 Amazon Web Services | 21 | 2026-09-21 | yes |
 Cloudinary | 21 | 2026-09-21 | yes |
 Forethought | 21 | 2026-09-21 | no |
 Hex | 21 | 2026-09-21 | yes |
 1Password | 20 | 2026-09-21 | yes |
 Aircall | 20 | 2026-09-21 | yes |
 Anthropic | 20 | 2026-09-21 | no |
 Calendly | 20 | 2026-09-21 | yes |
 Glean | 20 | 2026-09-21 | yes |
 HubSpot | 20 | 2026-09-21 | yes |
| incident.io | 20 | 2026-09-23 | yes |
 Nango | 20 | 2026-09-21 | no |
| SendSafely | 20 | 2026-09-23 | yes |
 Sigma Computing | 20 | 2026-09-21 | yes |
 SurveyMonkey | 20 | 2026-09-21 | yes |
| Paragon | 20 | 2026-09-23 | no |
| Armis | 19 | 2026-09-24 | no |
| Cleverbridge | 19 | 2026-09-24 | yes |
 Fireworks AI | 19 | 2026-09-21 | no |
 PlanetScale | 19 | 2026-09-21 | yes |
| Akixi | 18 | 2026-09-23 | yes |
| Arkose Labs | 18 | 2026-09-23 | yes |
 Groq | 18 | 2026-09-21 | no |
| OpenRouter | 18 | 2026-09-23 | no |
 Workato | 18 | 2026-09-21 | yes |
 Braze | 17 | 2026-09-21 | yes |
 Brevo | 17 | 2026-09-21 | yes |
 Cloudflare | 17 | 2026-09-21 | yes |
 Cognition | 17 | 2026-09-21 | yes |
 Cursor | 17 | 2026-09-21 | no |
 Iterable | 17 | 2026-09-21 | yes |
 Kentik | 17 | 2026-09-21 | yes |
 Mixpanel | 17 | 2026-09-21 | yes |
 New Relic | 17 | 2026-09-21 | no |
 Productboard | 17 | 2026-09-21 | yes |
| Recall.ai | 17 | 2026-09-23 | no |
 Replicate | 17 | 2026-09-21 | no |
 Snowflake | 17 | 2026-09-21 | yes |
 TurboPuffer | 17 | 2026-09-21 | yes |
 AssemblyAI | 16 | 2026-09-21 | no |
| dentsu | 16 | 2026-09-24 | yes |
 MongoDB | 16 | 2026-09-21 | no |
 OneTrust | 16 | 2026-09-21 | yes |
| Tremendous | 16 | 2026-09-24 | no |
 Orb | 16 | 2026-09-21 | yes |
 Zuora | 16 | 2026-09-21 | yes |
 Algolia | 15 | 2026-09-21 | yes |
 Amplitude | 15 | 2026-09-21 | yes |
 Canva | 15 | 2026-09-21 | yes |
| Clever Cloud | 15 | 2026-09-24 | yes |
 Elastic | 15 | 2026-09-21 | no |
| Fal | 15 | 2026-09-23 | no |
 Front | 15 | 2026-09-21 | yes |
| Level Access | 15 | 2026-09-24 | no |
 Merge | 15 | 2026-09-21 | yes |
| Parallel Web Systems | 15 | 2026-09-23 | no |
| Qualified | 15 | 2026-09-24 | yes |
 Slack | 15 | 2026-09-21 | yes |
 Statsig | 15 | 2026-09-21 | yes |
 ClickHouse | 14 | 2026-09-21 | yes |
 Hightouch | 14 | 2026-09-21 | yes |
 Liveblocks | 14 | 2026-09-21 | yes |
| Sierra | 14 | 2026-09-23 | no |
 Wasabi | 14 | 2026-09-21 | yes |
| Cartesia | 13 | 2026-09-23 | no |
 Datadog | 13 | 2026-09-21 | yes |
 Harvey | 13 | 2026-09-21 | yes |
 Inscribe | 13 | 2026-09-21 | no |
| OVHcloud | 13 | 2026-09-23 | yes |
 Retool | 13 | 2026-09-21 | yes |
 Skyflow | 13 | 2026-09-21 | yes |
| Svix | 13 | 2026-09-21 | yes |
 Databricks | 12 | 2026-09-21 | yes |
 Hugging Face | 12 | 2026-09-21 | yes |
 Informatica | 12 | 2026-09-21 | no |
 Miro | 12 | 2026-09-21 | yes |
| Moesif | 12 | 2026-09-23 | yes |
| Tavily | 12 | 2026-09-23 | no |
| Browserbase | 11 | 2026-09-23 | no |
| ConfigCat | 11 | 2026-09-23 | yes |
| Dropbox | 11 | 2026-09-21 | yes |
 LangChain | 11 | 2026-09-21 | no |
 Scaleway | 11 | 2026-09-21 | yes |
| Tines | 11 | 2026-09-24 | no |
 Tray.ai | 11 | 2026-09-21 | yes |
| Black Forest Labs | 10 | 2026-09-23 | no |
 Tanium | 10 | 2026-09-21 | yes |
 Abnormal AI | 9 | 2026-09-21 | yes |
| Box | 9 | 2026-09-21 | yes |
| Brave | 9 | 2026-09-23 | no |
| Clearbit | 9 | 2026-09-23 | yes |
 Cohere | 9 | 2026-09-21 | no |
 Confluent | 9 | 2026-09-21 | yes |
 Exa | 9 | 2026-09-21 | no |
 Pendo | 9 | 2026-09-21 | no |
 ActiveCampaign | 8 | 2026-09-21 | yes |
 Customer.io | 8 | 2026-09-21 | yes |
| DataDome | 8 | 2026-09-24 | no |
| Lago | 8 | 2026-09-24 | yes |
 GoodData | 8 | 2026-09-21 | yes |
| Grafana Labs | 8 | 2026-09-21 | no |
| Langfuse | 8 | 2026-09-24 | yes |
 NVIDIA | 8 | 2026-09-21 | yes |
| PingCAP | 8 | 2026-09-23 | yes |
 Sentry | 8 | 2026-09-21 | yes |
 TikTok | 8 | 2026-09-21 | yes |
| Appcues | 7 | 2026-09-23 | no |
| AppsFlyer | 7 | 2026-09-24 | no |
 Boomi | 7 | 2026-09-21 | yes |
 Fullstory | 7 | 2026-09-21 | yes |
 Gong | 7 | 2026-09-21 | no |
 Infobip | 7 | 2026-09-21 | no |
 Meta | 7 | 2026-09-21 | yes |
 Pinecone | 7 | 2026-09-21 | no |
| Temporal | 7 | 2026-09-23 | yes |
 WalkMe | 7 | 2026-09-21 | yes |
 World Labs | 7 | 2026-09-21 | yes |
| Cerebras | 6 | 2026-09-23 | no |
 Crusoe | 6 | 2026-09-21 | no |
 OwnBackup | 6 | 2026-09-21 | no |
 Ably | 5 | 2026-09-21 | no |
| Accenture | 5 | 2026-09-23 | yes |
 Bandwidth | 5 | 2026-09-21 | yes |
| CloudAMQP | 5 | 2026-09-23 | yes |
| Esri | 5 | 2026-09-24 | yes |
 Fastly | 5 | 2026-09-21 | yes |
 Heroku | 5 | 2026-09-21 | yes |
 Nebius | 5 | 2026-09-21 | yes |
 PostHog | 5 | 2026-09-21 | yes |
| Vultr | 5 | 2026-09-23 | yes |
 Adyen | 4 | 2026-09-21 | yes |
| Cello.so | 4 | 2026-09-24 | yes |
| Fingerprint | 4 | 2026-09-24 | no |
| Firecrawl | 4 | 2026-09-23 | no |
| Luzmo | 4 | 2026-09-24 | no |
| StarTree | 4 | 2026-09-24 | yes |
| Adapty | 3 | 2026-09-24 | no |
 CoreWeave | 3 | 2026-09-21 | no |
 Hetzner | 3 | 2026-09-21 | yes |
 Protiviti | 3 | 2026-09-21 | yes |
 Sumo Logic | 3 | 2026-09-21 | yes |
 TeleSign | 3 | 2026-09-21 | yes |
 Checkout.com | 2 | 2026-09-21 | no |
| Membrane | 2 | 2026-09-24 | no |
 Postmark | 2 | 2026-09-21 | no |
 WordPress VIP | 2 | 2026-09-21 | yes |
| Equinix | 1 | 2026-09-21 | no |
| Exoscale | 1 | 2026-09-24 | yes |
| Scaletrix.AI | 1 | 2026-09-24 | yes |
Why a record
Under GDPR art. 28(2), a processor working under a general authorisation must tell its customers of any intended addition or replacement of a subprocessor, so they can object. A subprocessor list is where that is said, and the only supply-chain statement a company signs its name to. This record quotes those lists, dates every reading, and keeps the history, for the DPO answering an auditor, counsel objecting inside the notice window and the reviewer filing evidence. Is a company in your chain? Β· How it is read Β· The subprocessors most often named Β· Who is behind your vendor, the lists drawn as one graph.