Vendor record · mongodb.com
What MongoDB promises about your data.
Where MongoDB publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
MongoDB lists its sub-processors at www.mongodb.com/products/platform/trust/subprocessors. We last read it on October 17, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 17, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at mongodb.com/legal/dpa (read October 1, 2026) gives you 30 days' notice.
- Window
- 30
- Sub-processors
- 26
- Pages
- 8
- Copies
- 64
days' notice when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
MongoDB DPA
MongoDB's data processing agreement gives 30 days' notice before a new sub-processor is engaged. Here is the clause, from our October 1, 2026 copy:
30
days' notice
“We maintain a current list of our Subprocessors at: https://www.mongodb.com/products/platform/trust/subprocessors which we will update at least 30 days before the addition or replacement of any Subprocessor.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that MongoDB published it.
mongodb.com/legal/dpa · read 2026-10-01 · fingerprint 58387d0e3cdc353b…
How it says it sends notice
“You may also register to receive email notifications of any change to our list of Subprocessors. 4.2. Objections to Subprocessors. In the event you have a reasonable objection to any new Subprocessor, either (A) we will instruct such Subprocessor not to process Customer Personal Data on your behalf and, if possible, continue to provide the Cloud Services in accordance with the terms of the Mo…”
mongodb.com/legal/dpa · read 2026-10-01
MongoDB sub-processors
MongoDB publishes a sub-processor list at www.mongodb.com/products/platform/trust/subprocessors; we last read it on October 17, 2026. It names 26 entries. The first 15, as the list prints them: Amazon Web Services, Inc.; Baseten Labs, Inc.; Box, Inc.; Coveo Software Corp.; Fastly, Inc.; Google LLC; Intercom R&D Unlimited Co.; Microsoft Corp; MongoDB, Inc.; MongoDB Australia Pty Ltd.; MongoDB Canada, Inc.; MongoDB Deutsche GmbH; MongoDB España, S.L.; MongoDB France SARL; MongoDB Israel Inc.; and 11 more in the full table below. The public record holds no change to the list read before September 17, 2026. A change we read after September 17, 2026 is published 30 days after we read it.
26 named · full table
Every public change we have recorded · Where vendors publish their lists
How long MongoDB keeps your data
We hold no statement about data retention from MongoDB's watched pages. The pages we watch: changelog mongodb.com/changelog; data processing agreement mongodb.com/legal/dpa; pricing page mongodb.com/pricing; privacy policy mongodb.com/legal/privacy; status page status.mongodb.com/; sub-processor list www.mongodb.com/products/platform/trust/subprocessors; trust and security page mongodb.com/trust; trust and security page trust.mongodb.com/.
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 26 · 1 name an AI provider we list
Amazon Web Services, Inc.
Cloud Provider
Baseten Labs, Inc.AI · Baseten
Inference services for the optional embedding and reranking model services included in the Cloud Services
United States
Box, Inc.
File Sharing for Remote Consulting Services
If you choose to share files with us during the delivery of remote Consulting S…
Coveo Software Corp.
Support Search Functionality
Quebec City, Canada
Fastly, Inc.
Content Delivery Network for Support
San Francisco, CA
Google LLC
Cloud Provider
Intercom R&D Unlimited Co.
Chat Support
San Francisco, CA
Microsoft Corp
Cloud Provider
MongoDB, Inc.
United States
MongoDB Australia Pty Ltd.
Australia
MongoDB Canada, Inc.
Canada
MongoDB Deutsche GmbH
Germany
MongoDB España, S.L.
Spain and Portugal
MongoDB France SARL
France
MongoDB Israel Inc.
Israel
MongoDB Italy S.R.L
Italy
MongoDB Poland
Poland
MongoDB Serviços de Software No Brasil Ltda
Brazil
MongoDB Singapore Pte. Ltd.
Singapore
MongoDB Software India Private Limited
India
MongoDB UK Limited
United Kingdom
Okta, Inc.
Authentication Services
San Francisco, CA
Salesforce.com, Inc.
Support Portal
San Francisco, CA
Stripe Inc.
Payment Processor
San Francisco, CA
Talkdesk, Inc.
Voice Support
San Francisco, CA
Twilio, Inc.
2FA and SMS Alerts
San Francisco, CA
Certifications the trust page names · CSA STAR · FedRAMP · FedRAMP · HITRUST · HITRUST · IRAP · IRAP · ISO 27001 · ISO 27001 · ISO 27017 · ISO 27017 · ISO 27018 · ISO 27018 · PCI DSS · SOC 2 · SOC 2 · SOC 2 Type II · TX-RAMP · TX-RAMP
Laws the trust page names · GDPR · GDPR · HIPAA · HIPAA
The pages' own stamps: Last updated 2024-10-21
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates MongoDB. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at MongoDB? With an email at mongodb.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is MongoDB in your product? Hear the morning we read a change.
You get the lines that moved, in MongoDB’s own words, and the date any window closes. No card. Nothing to cancel.