Vendor record · demandbase.com

What Demandbase promises about your data.

Where Demandbase publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.

Where it publishes

We haven't found a sub-processor list from Demandbase anywhere we've looked.

What has changed

We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 16, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.

Its window

When it adds a sub-processor, its clause at demandbase.com/data-processing-agreement (read October 9, 2026) gives you 5 days to object.

Window
5

days to object when it adds a sub-processor

Pages
5

pages we watch

Copies
22

dated copies of all its pages, since August 31, 2026

Demandbase DPA

Demandbase's data processing agreement gives 5 days to object to a new sub-processor. Here is the clause, from our October 9, 2026 copy:

5

days to object

“Customer may object in writing to Demandbase’s appointment of a new Sub-processor on reasonable grounds relating to data protection by notifying Demandbase promptly in writing within five (5) calendar days of an update to the Sub-processor List referenced in Section 3.3 and the parties shall discuss Customer concerns in good faith with a view to achieving a commercially reasonable resolution.”

Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Demandbase published it.

demandbase.com/data-processing-agreement · read 2026-10-09 · fingerprint 9122662651bceaa9…

Notice windows across every vendor we watch

Demandbase sub-processors

We have not found a sub-processor list published by Demandbase anywhere we looked.

Every public change we have recorded · Where vendors publish their lists

How long Demandbase keeps your data

Demandbase's trust and security page (www.demandbase.com/security-policy/, in the copy read October 11, 2026) says: “Customer Data is retained during the relationship and with Demandbase and for up to 13 months following the expiration or termination of the relationship.”

Training on customer data

“This use includes collecting data through integrations with customer relationship management (CRM) or marketing automation (MAS), email, or other systems, troubleshooting or improving our services, making inferences, and deriving insights, trends, use, and analytics, whether actual or predicted, from personal information collected.”

demandbase.com/privacy · read 2026-10-10

Retention windows vendors publish · What vendors say about training

What the pages say

Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.

Certifications the trust page names · SOC 2

The pages' own stamps: Effective date 2026-04-21 · Updated 2024-05-31

The pages we watch

Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.

Data processing agreement

demandbase.com/data-processing-agreement

2026-10-16

Pricing

demandbase.com/pricing

2026-10-10

Privacy policy

demandbase.com/privacy

2026-10-10

Terms of service

www.demandbase.com/terms-of-use/

2026-10-11

Trust and security

www.demandbase.com/security-policy/

2026-10-11

Where we get nothing

What Demandbase does not publish where we can read it

Of the 5 public pages we watch for Demandbase, these give us nothing right now.

Sub-processor list

we have not found one published anywhere we looked

Before you conclude anything

This only means we couldn’t read it on a public page. Demandbase may share it in its agreement, a trust portal, or with any customer who asks.

So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”

What this page doesn’t tell you

No score.

Nothing here rates Demandbase. A short notice window is a contract term, not a criticism.

Public pages only.

Private notices and negotiated terms are invisible to us. Your agreement may say something different.

Wrong? Tell us.

Corrections are free, always. We reply within 2–3 business days.

How we read a page · The change log

Work at Demandbase? With an email at demandbase.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.

Is Demandbase in your product? Hear the morning we read a change.

You get the lines that moved, in Demandbase’s own words, and the date any window closes. No card. Nothing to cancel.

Every vendor we watch · Redline, our free weekly email