Vendor record · coreweave.com
What CoreWeave promises about your data.
Where CoreWeave publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
CoreWeave lists its sub-processors at docs.coreweave.com/policies/terms-of-service/sub-processors. We last read it on October 15, 2026.
- What has changed
We've read its sub-processor list and data processing agreement since October 1, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at docs.coreweave.com/policies/terms-of-service/sub-processors (read October 14, 2026) gives you 30 days' notice.
- Window
- 30
- Sub-processors
- 3
- Pages
- 4
- Copies
- 20
days' notice when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
CoreWeave DPA
We have not found a data processing agreement published by CoreWeave anywhere we looked. CoreWeave's sub-processor list gives 30 days' notice before a new sub-processor is engaged. Here is the clause, from our October 14, 2026 copy:
30
days' notice
“CoreWeave will update this page at least 30 days before engaging a new sub-processor.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that CoreWeave published it.
docs.coreweave.com/policies/terms-of-service/sub-processors · read 2026-10-14 · fingerprint 92b2db5fa35c7435…
CoreWeave sub-processors
CoreWeave publishes a sub-processor list at docs.coreweave.com/policies/terms-of-service/sub-processors; we last read it on October 15, 2026. It names 3 entries. The entries, as the list prints them: Backblaze, Inc.; Flexify Inc.; Microsoft Corporation. The same list is in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
3 named · full table
Every public change we have recorded · Where vendors publish their lists
How long CoreWeave keeps your data
We hold no statement about data retention from CoreWeave's watched pages. The pages we watch: pricing page coreweave.com/pricing; privacy policy docs.coreweave.com/policies/terms-of-service/privacy-policy; sub-processor list docs.coreweave.com/policies/terms-of-service/sub-processors; trust and security page coreweave.com/trust. On training with customer data, CoreWeave's trust and security page (coreweave.com/trust, in the copy read October 15, 2026) says: “These capabilities are unified through CoreWeave Mission Control, which enables proactive detection, faster remediation, and sustained workload availability for training and inference at scale. ### How does CoreWeave handle privacy and personal data? CoreWeave processes customer data solely to deliver and operate the CoreWeave Cloud services.”
Training on customer data
“To link or combine with information we get from others to help us understand your needs and provide you with a better experience. | GDPR Article 6(1)(f) - legitimate interest in operating and improving our Services, provided such interests are not overridden by your fundamental rights and freedoms.”
docs.coreweave.com/policies/terms-of-service/privacy-policy · read 2026-10-15
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 3
Backblaze, Inc.
United States
Flexify Inc.
United States
Microsoft Corporation
United States
Laws the trust page names · GDPR
The pages' own stamps: Last updated 2026-02-24
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What CoreWeave does not publish where we can read it
Of the 4 public pages we watch for CoreWeave, these give us nothing right now.
Data processing agreement
we have not found one published anywhere we looked
Before you conclude anything
This only means we couldn’t read it on a public page. CoreWeave may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates CoreWeave. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at CoreWeave? With an email at coreweave.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is CoreWeave in your product? Hear the morning we read a change.
You get the lines that moved, in CoreWeave’s own words, and the date any window closes. No card. Nothing to cancel.