Vendor record · automationanywhere.com
What Automation Anywhere promises about your data.
Where Automation Anywhere publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
We watch www.automationanywhere.com/sites/default/files/internal-assets/dpa_en.pdf for Automation Anywhere's sub-processor list, but the site's robots.txt asks automated readers not to fetch this document, so we do not read it.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at automationanywhere.com/legal/dpa (read October 8, 2026) gives you 30 days to object.
- Window
- 30
- Pages
- 4
- Copies
- 16
days to object when it adds a sub-processor
pages we watch
dated copies of all its pages, since August 31, 2026
Automation Anywhere DPA
Automation Anywhere's data processing agreement gives 30 days to object to a new sub-processor. Here is the clause, from our October 8, 2026 copy:
30
days to object
“If Customer wishes to object to a new Subprocessor based on reasonable data protection concerns, it can do so within 30 days after notice of a new Subprocessor by following any process described by AAI in its notification to Customer or via registered letter sent to: Attention: Legal Department (Privacy Counsel) Automaton Anywhere, Inc. 633 River Oaks Pkwy San Jose, CA 95134 United States of America [email address on the vendor's page] AAI shall respond to such objections within a reasonable time frame so long as such objections have a reasonable basis.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Automation Anywhere published it.
automationanywhere.com/legal/dpa · read 2026-10-08 · fingerprint e52d2a076f2e77c7…
Automation Anywhere sub-processors
We watch www.automationanywhere.com/sites/default/files/internal-assets/dpa_en.pdf for Automation Anywhere's sub-processor list, and the site's robots.txt asks automated readers not to fetch this document, so we do not read it.
Every public change we have recorded · Where vendors publish their lists
How long Automation Anywhere keeps your data
We hold no statement about data retention from Automation Anywhere's watched pages. The pages we watch: data processing agreement automationanywhere.com/legal/dpa; privacy policy automationanywhere.com/privacy; terms of service automationanywhere.com/terms; trust and security page automationanywhere.com/trust-center. On training with customer data, Automation Anywhere's data processing agreement (automationanywhere.com/legal/dpa, in the copy read October 8, 2026) says: “Preferred hours of contact *Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialised training), keeping a record of access to the data, restrictions for onward tra…”
Training on customer data
“The legal basis for processing this personal information is (i) our legitimate interests, namely performing our services or monitoring and improving our Sites and services, or (ii) necessity for performance of a contract between you, your company or our customer, and us.”
automationanywhere.com/privacy · read 2026-10-08
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Certifications the trust page names · Cyber Essentials · HITRUST · ISO 27001 · ISO 42001
Laws the trust page names · GDPR · HIPAA
International transfer notice · United States
“Territories and Transfers Personal information collected by Automation Anywhere may be stored and processed in your geographic region, in the United States, or in other countries in which Automation Anywhere or its service providers maintain facilities or operations.”
automationanywhere.com/privacy · read 2026-10-08
The pages' own stamps: Last Modified 2026-04-01 · Last Modified 2018-11-05 · last updated 2026-09-25
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What Automation Anywhere does not publish where we can read it
Of the 4 public pages we watch for Automation Anywhere, these give us nothing right now.
Sub-processor list
the site's robots.txt asks automated readers not to fetch this document, so we do not read it
www.automationanywhere.com/sites/default/files/internal-assets/dpa_en.pdfBefore you conclude anything
This only means we couldn’t read it on a public page. Automation Anywhere may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Automation Anywhere. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Automation Anywhere? With an email at automationanywhere.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Automation Anywhere in your product? Hear the morning we read a change.
You get the lines that moved, in Automation Anywhere’s own words, and the date any window closes. No card. Nothing to cancel.