Using Okta in your product? Automate the DPA notifications you owe your own customers when this list changes.

Add Okta to TrustPages

Okta sub-processors

Okta publishes the list below on its own site. We check that page daily and record what moves, so this page shows the current list and what changed before it.

Entries: 89 List updated: 02 Sep 2026 Last checked: 02 Sep 2026 Source: Okta's page

Current sub-processors

Sub-processor Purpose Location
Amazon Web Services, Inc. Hosting and cloud infrastructure USA, Canada, India, Germany, Ireland, Australia, Japan
Google, Inc. Cyber Defense - detect, investigate and respond to cyberthreats USA, EMEA
Splunk, Inc. Business analytics USA, EMEA, Germany, Ireland, United Kingdom
Salesforce.com, Inc. Support and maintenance ticketing process USA
Twilio, Inc. SMS authenticator USA
S.C. Computer Generated Solutions Romania S.R.L., a subsidiary of Computer Generated Solutions, Inc. (USA) 24x7 customer support team Romania
SendGrid, Inc. Email notifications and email access request inbox USA
TeleSign Corporation SMS authenticator USA, Netherlands
Snowflake Computing, Inc. Data warehouse services USA, Canada, India, Germany, Australia, Japan
Google, Inc. Hosting and cloud infrastructure USA, Canada, India, Germany, Belgium, Australia, Japan
MongoDB, Inc. Managed database services USA, Canada, India, Germany, Belgium, Netherlands, Australia, Japan
DataDog, Inc. Business analytics USA, Germany
DataDog, Inc. Business analytics USA
Google, Inc. Hosting and cloud infrastructure USA, Canada, India, Germany, Belgium, Australia, Japan
MongoDB, Inc. Hosting and cloud infrastructure USA, Canada, India, Germany, Belgium, Netherlands, Australia, Japan
DataDog, Inc. Business analytics USA, Germany
Amazon Web Services, Inc. Hosting and cloud infrastructure USA
salesforce.com, inc. Support and maintenance ticketing process USA
Twilio, Inc. SMS authenticator USA
SendGrid, Inc. Email notifications USA
TeleSign Corporation SMS authenticator USA
Snowflake Computing, Inc. Data warehouse services USA, Germany, Australia
S.C. Computer Generated Solutions Romania S.R.L., a subsidiary of Computer Generated Solutions, Inc. (USA) Customer support USA
Splunk, Inc. Business analytics USA
DataDog, Inc. Business analytics USA
MongoDB, Inc. Managed database services USA
Google, Inc. Hosting and cloud infrastructure USA
Amazon Web Services, Inc. Hosting and cloud infrastructure USA
salesforce.com, inc. Support and maintenance ticketing process USA
Snowflake Computing, Inc. Data warehouse services USA
DataDog, Inc. Business analytics USA
MongoDB, Inc. Managed database services USA
Splunk, Inc. Business analytics USA
Google Inc. Non-training generative artificial intelligence services USA
Amazon Web Services, Inc. Hosting and cloud infrastructure USA, Germany, Australia, Japan
MongoDB, Inc Data warehouse services USA, Germany, Australia
Sentry Security event analysis and incident response USA, Germany
Snowflake Computing Netherlands B.V Data warehouse services USA, Germany, Australia
Splunk, Inc. Business analytics USA, Germany, Ireland, United Kingdom
salesforce.com, inc. Support and maintenance ticketing process USA
S.C. Computer Generated Solutions Romania S.R.L., a subsidiary of Computer Generated Solutions, Inc. (USA) 24x7 customer support team Romania
SendGrid, Inc. Email notifications USA
Slack Technologies, LLC Messaging and collaboration USA
Amazon Web Services, Inc. Hosting and cloud infrastructure USA, Canada, United Kingdom, European Union, Japan, Australia, Brazil, Germany, Hong Kong, Indonesia, Ireland, Italy, United Arab Emirates, France, Sweden, South Africa, Bahrain, India, South Korea, Singapore, Mexico, Thailand
DataDog, Inc. Business analytics USA
Microsoft, Inc. Hosting and cloud infrastructure Canada, Japan, Australia, USA, Brazil, Ireland, Netherlands, France, Switzerland, Norway, Germany, Sweden, South Africa, United Arab Emirates, United Kingdom, India, South Korea
salesforce.com, inc. Support and maintenance ticketing process USA
Snowflake Computing, Inc. Data warehouse services Germany
MongoDB, Inc. Managed database services
Aiven Ltd Managed database services
SendGrid, Inc. Email notifications USA
Twilio, Inc. SMS authenticator USA
S.C. Computer Generated Solutions Romania S.R.L., a subsidiary of Computer Generated Solutions, Inc. (USA) 24x7 customer support team Romania
Cloudflare, Inc. Content delivery network and distributed-denial-of-service attack prevention services Global
Amazon Web Services, Inc. Hosting and cloud infrastructure USA, European Union, Australia, New Zealand, Canada, Brazil, Germany, Ireland, Italy, United Kingdom, France, Sweden, India, Japan, South Korea, Singapore
DataDog, Inc. Business analytics USA
Salesforce, Inc. Support and maintenance ticketing process USA
Snowflake Computing, Inc. Data warehouse services Germany
SendGrid, Inc. Email notifications USA
Twilio, Inc. SMS authenticator USA
Amazon Web Services, Inc. Breached password comparison USA, Canada, United Kingdom, European Union, Japan, Australia
Amazon Web Services, Inc. Non-training generative artificial intelligence services USA
Okta International, LLC (Delaware)
Okta UK LTD (United Kingdom)
Okta Australia PTY Limited (Australia)
Okta Software Canada, Inc. (Canada)
Okta France SAS (France)
Okta GmbH (Germany)
Okta Identity Netherlands BV (Netherlands)
Okta Italy S.r.l.
Okta Poland sp. z o.o. (Poland)
Okta Identity Spain, S.L.
Okta SG Pte. Ltd. (Singapore)
Okta Japan K.K. (Japan)
Okta Identity Philippines Inc. (Philippines)
Okta Switzerland GmbH (Switzerland)
Okta Identity Korea Limited (South Korea)
Okta Identity Ireland Limited
Okta Identity India Private Limited (India)
SaaSure Mexico, S. de R.L. de C.V. (Mexico)
SaaSure Sweden AB (Sweden)
Auth0, LLC (Delaware)
Auth0 International LLC (Delaware)
Auth0 Argentina S.A. (Argentina)
Auth0 Ltd. (United Kingdom)
Auth0 Uruguay S.A. (Uruguay)
Spera Cybersecurity, Inc. (Delaware)
Spera Cybersecurity Ltd. (Israel)
Axiom Security Ltd. (Israel)

Change history

No changes since monitoring began.

Watching this page daily since 01 Sep 2026.

Why this matters if you use Okta

Under GDPR Article 28(2), your own customers are usually entitled to notice before you add or replace a sub-processor — and Okta's sub-processors are part of that chain. The notice period in a typical DPA is 10 to 30 days, and it starts when the vendor updates their page, not when you notice.

Monitor Okta on your own trust page — free

3 vendors free, permanently. No card.