Netlify sub-processors
Netlify publishes the list below on its own site. We check that page daily and record what moves, so this page shows the current list and what changed before it.
Compiled automatically from Netlify's own published page, linked above. This is a convenience copy, not an official statement by Netlify, and automated reading can lag behind or misinterpret a page. Confirm against the source before relying on it.
Current sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Altinity, Inc / Clickhouse | Managed ClickHouse database services, including hosting, operation, and support of ClickHouse analytical databases. | US |
| Amazon Web Services (AWS) | Cloud infrastructure provider supplying AWS compute, storage, networking, and managed services used to host and run Netlify infrastructure. | US |
| Amplitude, Inc. | Product analytics platform used to track user behavior, measure feature adoption, and analyze product engagement. | US |
| Anthropic | Provider of large language models (Claude) and related AI services, accessed via API for AI-enabled features and workflows. | US |
| Automattic, Inc. (Akismet) | Automated spam-filtering service (Akismet) used to detect and filter spam in comment, form, and text submissions. | US |
| Axiom | Logging, tracing, and monitoring platform used to ingest, store, and query event data for observability and troubleshooting. | US |
| Crowdstrike, Inc. (Humio) | Log management and observability platform (Humio, now CrowdStrike Falcon LogScale) used for log ingestion, search, and security analytics. | US |
| Datadog, Inc. | Observability platform providing infrastructure and application monitoring, log management, and security monitoring. | US |
| Dynatrace DevCycle | Feature flag and feature management platform used to control feature releases, gradual rollouts, and experimentation. | US |
| Fivetran Inc. | Automated data movement platform providing ELT pipelines that replicate data from source systems into the data warehouse. | US |
| Google Cloud Platform GCP / Zencore Group, LLC | Google Cloud Platform infrastructure and managed services, with Zencore Group, LLC as the associated Google Cloud partner. | US |
| Kapa.AI | AI assistant trained on developer documentation that answers technical questions for developers and support teams. | US |
| Name.com | Domain name registrar used to register and manage company domain names. | US |
| Neon | Third-party provider for a Netlify Extension that lets users create a Postgres database on Netlify's account with Neon and later claim it for production use. | US |
| NS1 | Managed DNS and traffic management service providing authoritative DNS and traffic steering. | Global, US |
| OpenAI | Provider of large language models (GPT family) and related AI services, accessed via API. | US |
| OpenRouter | AI services: model routing platform providing unified API access to large language models from multiple providers. | US |
| Orb | Usage-based billing platform used to meter usage, calculate charges, and generate invoices for usage-based pricing. | US |
| Salesforce, Inc. | Customer relationship management (CRM) platform used to manage accounts, contacts, opportunities, and the sales pipeline. | US |
| Segment | Customer data platform used to collect, route, and deliver analytics event data to downstream tools. | US |
| SendGrid | Cloud-based email delivery service used to send transactional and marketing emails. | US |
| Sigma Computing, Inc. | Cloud analytics and business intelligence platform used to explore and visualize data from the cloud data warehouse. | US |
| Smartbear Software, Inc / Bugsnag | Software quality platform providing testing and API quality tools (SmartBear) and application error monitoring (Bugsnag). | US |
| Snowflake, Inc. | Cloud data warehouse used to store, process, and analyze company data. | US |
| Stripe | Payment processing platform used to process customer credit card payments. | US |
| WorkOS, Inc. | Enterprise authentication platform providing SSO, directory sync, and related enterprise identity integrations. | US |
Change history
The 'Data Retention and Deletion Summary' access on request information was removed from the policy.
Added: Altinity, Inc / Clickhouse, Amazon Web Services (AWS), Amplitude, Inc., Anthropic, Automattic, Inc. (Akismet), Axiom, Crowdstrike, Inc. (Humio), Datadog, Inc., Dynatrace DevCycle, Fivetran Inc., Google Cloud Platform GCP / Zencore Group, LLC, Kapa.AI, NS1, Name.com, Neon, OpenAI, OpenRouter, Orb, Salesforce, Inc., Segment, SendGrid, Sigma Computing, Inc., Smartbear Software, Inc / Bugsnag, Snowflake, Inc., Stripe, WorkOS, Inc.
The Netlify Trust Center page was significantly reorganized. The previous page listed various compliance standards and trust badges. The updated page presents a clearer overview of compliance programs (including held dates for SOC 2 Type II, ISO/IEC 27001, Penetration Test, PCI DSS, PCI DSS v4.0.0, GDPR-aligned DPA, EU-US DPF, Swiss-US DPF), an expanded document inventory, and a comprehensive list of 27 subprocessors, including their purpose, category, and locations, which were not explicitly listed before. Several new subprocessors such as Altinity, Anthropic, Axiom, Kapa.AI, Neon, OpenAI, OpenRouter, Orb, and WorkOS, Inc. have been added.
Why this matters if you use Netlify
Under GDPR Article 28(2), your own customers are usually entitled to notice before you add or replace a sub-processor — and Netlify's sub-processors are part of that chain. The notice period in a typical DPA is 10 to 30 days, and it starts when the vendor updates their page, not when you notice.
Monitor Netlify on your own trust page — free3 vendors free, permanently. No card.