Vendor record · elastic.co
What Elastic promises about your data.
Where Elastic publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Elastic lists its sub-processors at www.elastic.co/agreements/external_subprocessors. We last read it on October 15, 2026.
- What has changed
We've read its sub-processor list and data processing agreement since October 1, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at www.elastic.co/pdf/v021423.0-elastic-customer-dpa.pdf (read October 1, 2026) gives you 30 days to object.
- Window
- 30
- Sub-processors
- 17
- Pages
- 7
- Copies
- 36
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Elastic DPA
Elastic's data processing agreement gives 30 days to object to a new sub-processor. Here is the clause, from our October 1, 2026 copy:
30
days to object
“Customer may object in writing to Elastic's appointment of a new Sub-processor by notifying Elastic promptly in writing within thirty (30) calendar days of Elastic notice in accordance with Section 4.1 above.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Elastic published it.
www.elastic.co/pdf/v021423.0-elastic-customer-dpa.pdf · read 2026-10-01 · fingerprint 34501eb41f468a1e…
How it says it sends notice
“To be notified of changes to this list, subscribe via the RSS feed. ## Elastic Cloud Elastic Cloud uses cloud service providers, such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform, to provide Elastic Cloud.”
www.elastic.co/agreements/external_subprocessors · read 2026-10-15
Elastic sub-processors
Elastic publishes a sub-processor list at www.elastic.co/agreements/external_subprocessors; we last read it on October 15, 2026. It names 17 entries. The first 15, as the list prints them: Amazon Web Services, Inc.; Amazon Web Services EMEA SARL; Atlassian Statuspage; Cloudflare, Inc.; Google LLC (GCP); Google Ireland Limited (GCP); International Business Machines Corporation (IBM Cloud (Softlayer)); Microsoft Corporation (Azure); MongoDB, Inc.; Okta, Inc.; Salesforce.com, Inc.; Serper; Stripe, Inc.; Supabase, Inc.; ThorData; and 2 more in the full table below. The public record holds no change to the list read before September 16, 2026. A change we read after September 16, 2026 is published 30 days after we read it.
17 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Elastic keeps your data
We hold no statement about data retention from Elastic's watched pages. The pages we watch: changelog elastic.co/whats-new; data processing agreement www.elastic.co/pdf/v021423.0-elastic-customer-dpa.pdf; pricing page elastic.co/pricing; privacy policy elastic.co/privacy; sub-processor list www.elastic.co/agreements/external_subprocessors; terms of service www.elastic.co/legal/terms-of-use; trust and security page elastic.co/trust. On training with customer data, Elastic's privacy policy (elastic.co/privacy, in the copy read October 15, 2026) says: “Data collected from these marketing campaigns is not used by our third-party vendors to train their own generalized AI models. - Comply with law. We use your information as required to be compliant with applicable laws, regulations, court orders, government, and law enforcement requests. - With machine learning and artificial intelligence. We use artificial intelligence and machine learni…”
Training on customer data
“We recommend that you review the privacy practices of such partners and sponsors. - Education and training. If you sign up for an Elastic certification course or training, Elastic will use your information to facilitate the delivery of such course or training. - Research and innovation. We use your information to develop new products, features, and services using research and development …”
elastic.co/privacy · read 2026-10-15
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 17
Amazon Web Services, Inc.
Hosting (other than in Europe, the Middle East, and Africa)
Amazon Web Services EMEA SARL
Hosting (in Europe, the Middle East, and Africa)
Atlassian Statuspage
Public status-page monitoring: https://status.jina.ai/
Cloudflare, Inc.
CDN / edge proxy for Jina AI APIs and dashboard
Global
Google LLC (GCP)
Hosting and inference for embeddings, rerank, and related public API services(api.jina.ai)
United States
Google Ireland Limited (GCP)
Hosting
International Business Machines Corporation (IBM Cloud (Softlayer))
Hosting
United States
Microsoft Corporation (Azure)
Hosting
MongoDB, Inc.
Caching layer and database for Jina Reader
United States and Belgium
Okta, Inc.
Access authentication
United States
Salesforce.com, Inc.
Customer support ticketing via Service Cloud
United States
Serper
SERP API (Google Search) for Jina Search
United States and Singapore
Stripe, Inc.
Payment processing for prepaid tokens
United States
Supabase, Inc.
Account, API key, and prepaid-wallet database
United States
ThorData
Residential proxy when Reader cannot fetch a URL directly
Tines Automation, Inc.
Enterprise workflow automation based on alerts from the customer's Elastic Prod…
Tines Security Services Limited
Enterprise workflow automation based on alerts from the customer's Elastic Prod…
Certifications the trust page names · CSA STAR · Cyber Essentials · FedRAMP · IRAP · ISO 27001 · ISO 27017 · ISO 27018 · PCI DSS · SOC 2 · SOC 3
Laws the trust page names · HIPAA
The pages' own stamps: Effective Date 2026-09-07 · Last Revised 2024-01
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates Elastic. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Elastic? With an email at elastic.co you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Elastic in your product? Hear the morning we read a change.
You get the lines that moved, in Elastic’s own words, and the date any window closes. No card. Nothing to cancel.