Vendor record · intercom.com
What Intercom promises about your data.
Where Intercom publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Intercom lists its sub-processors at trust.intercom.com/subprocessors. We last read it on October 14, 2026, and a later attempt returned HTTP 429.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at intercom.com/data-processing-agreement (read October 9, 2026) gives you 20 days to object.
- Window
- 20
- Sub-processors
- 14
- Pages
- 6
- Copies
- 38
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Intercom DPA
Intercom's data processing agreement gives 20 days to object to a new sub-processor. Here is the clause, from our October 9, 2026 copy:
20
days to object
“If Customer reasonably objects to the appointment of a new Sub-processor within twenty (20) days of receiving such notice, on reasonable grounds relating to the protection of the Customer Personal Data, then Intercom will work in good faith with Customer to find an alternative solution.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Intercom published it.
intercom.com/data-processing-agreement · read 2026-10-09 · fingerprint f550cfb6b622d600…
Intercom sub-processors
Intercom publishes a sub-processor list at trust.intercom.com/subprocessors; we last read it on October 14, 2026, and a later attempt returned HTTP 429. It names 14 entries. The entries, as the list prints them: Ably; Amazon Web Services, Inc.; Anthropic, PBC; Cartesia AI, Inc.; Cloudflare, Inc.; Eleven Labs, Inc.; Google; Mailgun Technologies, LLC; Message Systems, Inc. (d/b/a Sparkpost); Microsoft Corporation (EU); OpenAI, L.L.C.; PlanetScale Inc.; Snowflake Inc.; Twilio, Inc.. The same list is in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
14 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Intercom keeps your data
Intercom's data processing agreement (intercom.com/data-processing-agreement, in the copy read October 9, 2026) says: “Intercom will permanently and securely delete all live (online or network accessible) instances of the Customer Data within 30 days upon Customer’s in-app deletion request.”
Training on customer data
“When confidence thresholds aren't met, Fin escalates to a human agent rather than guessing. ### Does Fin use my customer data to train its AI models? Fin can use anonymized customer data for model fine-tuning, and you can opt out at any time, with data deleted within 30 days.”
intercom.com/security · read 2026-10-10
Training on customer data
“Subject to the terms of this Agreement, Customer hereby grants to Intercom a non-exclusive, worldwide, royalty-free right to access, use and display the Customer Data during the Term in order to provide and improve our Services, including for Intercom AI model training. 3.3.Storage of Customer Data. Intercom does not provide an archiving service.”
intercom.com/terms-of-service · read 2026-10-10
Training on customer data
“When we have entered into an agreement with you, we process your personal data as necessary to meet our contractual obligations to you. - Improving the Intercom Services and Sites: We process your personal data to improve and optimize the Intercom Services and Sites and to understand how you use the Intercom Services and Sites, including to monitor usage or traffic patterns and to analyze tre…”
intercom.com/privacy · read 2026-10-11
Training on customer data
“Third-party AI providers are contractually barred from training on your data, with zero retention once a response is generated. Explore the Fin CX Model Suite Reliability & Scale ## Proven scale and reliability Intercom Helpdesk and Fin AI Agent run on infrastructure built for continuous uptime, with redundancy across regions.”
intercom.com/security · read 2026-10-10
Training on customer data
“Customer agrees that Intercom or its suppliers retain all right, title and interest (including all Intellectual Property Rights) in and to the Services and all Documentation, Intercom Code, Intercom Apps, and any and all related and underlying technology and materials and any derivative works, modifications or improvements of any of the foregoing, including any Feedback (collectively, “**Intercom…”
intercom.com/terms-of-service · read 2026-10-10
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 14 · 3 name an AI provider we list
Ably
Message delivery service to support real-time delivery of messages via messenger products
Amazon Web Services, Inc.
Cloud infrastructure and services provider supporting data processing activities on behalf of Intercom
USA or EU dependent upon customer's selected region
Anthropic, PBCAI · Anthropic
Anthropic is an IT safety and research company that focuses on increasing the safety of large-scale AI systems.
USA
Cartesia AI, Inc.
Provides AI Processing for Fin Voice AI Agent
USA or EU dependent upon customer's selected region
Cloudflare, Inc.
Cloudflare is a web performance and security company that provides content delivery network (CDN) services, DDoS mitigation, Internet security, and distributed…
USA or EU dependent upon Customer's selected region
Eleven Labs, Inc.AI · ElevenLabs
Provides AI Processing (specifically text to speech) for Fin Voice AI Agent
USA or EU dependent upon customer's selected region
Provides AI processing. For customers in the Intercom USA or Australian region,…
Mailgun Technologies, LLC
Mailgun is the all-in-one, intelligent email delivery platform trusted by businesses, loved by developers
USA
Message Systems, Inc. (d/b/a Sparkpost)
SparkPost is an email delivery platform that helps businesses of all sizes predict and monitor ISP responses, email bounce rates and spam traps in real-time
USA
Microsoft Corporation (EU)
Provides EU hosted AI Products by utilizing Azure OpenAI Service
OpenAI, L.L.C.AI · OpenAI
OpenAI is an AI research and deployment company. Our mission is to ensure that artificial general intelligence benefits all of humanity.
USA or EU dependent upon customer's selected region
PlanetScale Inc.
PlanetScale is a fully-managed MySQL database platform, powered by Vitess
USA or EU dependent upon customer's selected region
Snowflake Inc.
Snowflake enables data storage, processing, and analytic solutions
USA or EU dependent upon customer's selected region
Twilio, Inc.
Twilio is a cloud communications platform that allows developers to add phone calls, text messages, video, and other communication features to their applicatio…
USA
Certifications the trust page names · ISO 27001 · ISO 27018 · ISO 27701 · ISO 42001 · SOC 2 Type II
Laws the trust page names · GDPR · HIPAA
Data location · European Union
“However, for those customers who use Intercom’s regional data hosting services in the EU or Australia , their data will be stored and processed in the applicable designated region (i.e., EU or Australia), unless otherwise noted in our Subprocessor Page.”
intercom.com/data-processing-agreement · read 2026-10-09
International transfer notice · United Kingdom
“(ii) where the UK GDPR applies, a transfer of personal data from the UK to any other country which is not based on adequacy regulations pursuant to Section 17A of the Data Protection Act 2018; and (iii) where the Swiss DPA applies, a transfer of personal data to a country outside of Switzerland which is not included on the list of adequate jurisdictions published by the Swiss Federal Data Protect…”
intercom.com/data-processing-agreement · read 2026-10-09
Data location · United States
“By default, all Customer Data is permanently stored in the USA and is backed up for disaster recovery.”
intercom.com/data-processing-agreement · read 2026-10-09
Data location · United States
“Transfers of Your Personal Data 6.1The Intercom Services and Sites, and our messenger domains are provided and hosted in the United States.”
intercom.com/privacy · read 2026-10-11
Data location · United States
“Global infrastructure US · EU · AU Data hosted in the region your residency needs require, with redundant systems and no single point of failure.”
intercom.com/security · read 2026-10-10
The pages' own stamps: Effective 2025-04-09 · Effective 2026-08-21 · Effective 2026-09-08
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates Intercom. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Intercom? With an email at intercom.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Intercom in your product? Hear the morning we read a change.
You get the lines that moved, in Intercom’s own words, and the date any window closes. No card. Nothing to cancel.