Vendor record · modal.com

What Modal promises about your data.

Where Modal publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.

Where it publishes

Modal lists its sub-processors at trust.modal.com/subprocessors. We last read it on October 14, 2026, and a later attempt returned HTTP 429.

What has changed

We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.

Its window

We couldn't find a notice window in Modal's data processing agreement at modal.com/legal/dpa.

Window
—

no window we can quote yet

Sub-processors
26

sub-processors named

Pages
7

pages we watch

Copies
48

dated copies of all its pages, since August 31, 2026

Modal DPA

Modal's data processing agreement is at modal.com/legal/dpa; we last read it on October 15, 2026. We have not found a sentence in it that states how much notice customers get before a new sub-processor is engaged, so there is no window we can quote. That is a gap in our reading, not proof that no such term exists.

Notice windows across every vendor we watch

Modal sub-processors

Modal publishes a sub-processor list at trust.modal.com/subprocessors; we last read it on October 14, 2026, and a later attempt returned HTTP 429. It names 26 entries. The first 15, as the list prints them: Amazon Web Services; Andromeda Cluster, Inc.; Cirrascale Cloud Services LLC; Civo Limited; Clickhouse, Inc; Cloudflare, Inc; Crusoe Energy Systems LLC; Datadog; G-Core Labs S.A.; Google Cloud Platform; Hex Technologies, Inc.; Hyperbolic Labs, Inc.; Lambda Labs; Massed Compute Inc.; Megaport Limited; and 11 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.

26 named · full table

Every public change we have recorded · Where vendors publish their lists

How long Modal keeps your data

We hold no statement about data retention from Modal's watched pages. The pages we watch: changelog modal.com/changelog; data processing agreement modal.com/legal/dpa; pricing page modal.com/pricing; privacy policy modal.com/legal/privacy-policy; sub-processor list trust.modal.com/subprocessors; terms of service modal.com/legal/terms; trust and security page modal.com/docs/guide/security. On training with customer data, Modal's terms of service (modal.com/legal/terms, in the copy read October 11, 2026) says: “Modal will not, except with Customer's prior written consent: (i) train any AI model using Customer Data, or (ii) export Customer Data into, or cause Customer Data to be ingested by, large language models.”

Retention windows vendors publish · What vendors say about training

What the pages say

Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.

Sub-processors named · 26

Amazon Web Services

Cloud hosting provider

Global

Andromeda Cluster, Inc.

Cloud hosting provider

US

Cirrascale Cloud Services LLC

Cloud hosting provider

US

Civo Limited

Cloud hosting provider

Global

Clickhouse, Inc

Logging service

US

Cloudflare, Inc

Cloud hosting provider

US

Crusoe Energy Systems LLC

Cloud hosting provider

Global

Datadog

Cloud monitoring

US

G-Core Labs S.A.

Cloud hosting provider

Global

Google Cloud Platform

Cloud hosting provider

Global

Hex Technologies, Inc.

Data analytics

US

Hyperbolic Labs, Inc.

Cloud hosting provider

Global

Lambda Labs

Cloud hosting provider

Global

Massed Compute Inc.

Cloud hosting provider

US

Megaport Limited

Cloud hosting provider

US

Microsoft Azure

Cloud hosting provider

Global

Nebius Inc.

Cloud hosting provider

Global

NexGen Cloud Limited

Cloud hosting provider

Global

Oracle Cloud

Cloud hosting provider

Global

ORNN AI INC.

Cloud hosting provider

Global

PhoenixNAP, LLC

Cloud hosting provider

US

Rackdog, LLC

Cloud hosting provider

US

San Francisco Compute Company

Cloud hosting provider

Global

Snowflake Inc.

Data warehouse

US

The Constant Company, LLC (Vultr)

Cloud hosting provider

US

Verda Cloud Oy

Cloud hosting provider

EU

Certifications the trust page names · SOC 2 Type II

Laws the trust page names · GDPR · HIPAA

The pages' own stamps: Effective 2025-10-31 · Effective 2026-05 · Last updated 2023-05-17

The pages we watch

Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.

Changelog

modal.com/changelog

2026-10-15

Data processing agreement

modal.com/legal/dpa

2026-10-15

Pricing

modal.com/pricing

2026-10-11

Privacy policy

modal.com/legal/privacy-policy

2026-10-10

Sub-processor list

trust.modal.com/subprocessors

2026-10-14

Terms of service

modal.com/legal/terms

2026-10-11

Trust and security

modal.com/docs/guide/security

2026-10-11

What this page doesn’t tell you

No score.

Nothing here rates Modal. A short notice window is a contract term, not a criticism.

Public pages only.

Private notices and negotiated terms are invisible to us. Your agreement may say something different.

Wrong? Tell us.

Corrections are free, always. We reply within 2–3 business days.

How we read a page · The change log

Work at Modal? With an email at modal.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.

Is Modal in your product? Hear the morning we read a change.

You get the lines that moved, in Modal’s own words, and the date any window closes. No card. Nothing to cancel.

Every vendor we watch · Redline, our free weekly email