Vendor record · replit.com
What Replit promises about your data.
Where Replit publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Replit lists its sub-processors at replit.com/subprocessors. We last read it on October 15, 2026.
- What has changed
We last saw its sub-processor list change on September 11, 2026, and none to its data processing agreement before September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
We couldn't find a notice window in Replit's data processing agreement at replit.com/dpa.
- Window
- —
- Sub-processors
- 48
- Pages
- 7
- Copies
- 45
no window we can quote yet
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Replit DPA
Replit's data processing agreement is at replit.com/dpa; we last read it on October 15, 2026. We have not found a sentence in it that states how much notice customers get before a new sub-processor is engaged, so there is no window we can quote. That is a gap in our reading, not proof that no such term exists.
Replit sub-processors
Replit publishes a sub-processor list at replit.com/subprocessors; we last read it on October 15, 2026. It names 48 entries. The first 15, as the list prints them: Amplitude; Anima App, Inc.; Anthropic; AppsFlyer INC; Attribution Inc.; Baseten; Catamorphic Co. DBA LaunchDarkly; Civilized Discourse Construction Kit, Inc; Clazar; Clerk; Cloudflare; Common Room; Datadog, Inc.; Enterpret; Fireworks AI, Inc.; and 33 more in the full table below. The latest change to the list in the public record was read on September 11, 2026.
48 named · full table
Latest public change · read 2026-09-11
+ SideGuide Technologies, Inc. d/b/a Firecrawl |
+ USA |
+ Web data extraction for AI applications |
Every public change we have recorded · Where vendors publish their lists
How long Replit keeps your data
We hold no statement about data retention from Replit's watched pages. The pages we watch: changelog replit.com/changelog; data processing agreement replit.com/dpa; pricing page replit.com/pricing; privacy policy replit.com/privacy; sub-processor list replit.com/subprocessors; terms of service replit.com/terms; trust and security page replit.com/security. On training with customer data, Replit's privacy policy (replit.com/privacy, in the copy read October 1, 2026) says: “For example, we have a legitimate interest in using Personal Data for product development and internal analytics purposes, to improve the accuracy of our machine learning technologies such as code generation, and otherwise to improve the safety, security, and performance of our Services. EU Representative and Your Rights If you are located in the European Economic Area, Replit has appointed D…”
Training on customer data
“Replit reserves the right to access the content of your private apps for the purpose of troubleshooting, improving our service, and ensuring the safety and security of the Service. c.”
replit.com/terms · read 2026-10-01
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 48 · 4 name an AI provider we list
Amplitude
Analytics
USA
Anima App, Inc.
Design system imports
USA
AnthropicAI · Anthropic
AI models
USA
AppsFlyer INC
Analytics and customer interactions
USA
Attribution Inc.
Marketing and analytics
USA
BasetenAI · Baseten
AI infrastructure platform
USA
Catamorphic Co. DBA LaunchDarkly
Engineering
USA
Civilized Discourse Construction Kit, Inc
Customer support
USA
Clazar
Billing
USA
Clerk
Enterprise SSO
USA
Cloudflare
Cloud infrastructure
USA
Common Room
Customer support
USA
Datadog, Inc.
Analytics
USA
Enterpret
Customer feedback
USA
Fireworks AI, Inc.AI · Fireworks AI
AI infrastructure platform
USA
Fivetran
Data storage and processing
USA
Google, Inc
Cloud Infrastructure for our apps and services, AI models; analytics and customer interactions
USA
Grafana Labs
Cloud monitoring
USA
Hashboard
Analytics
USA
HashiCorp Cloud
Cloud infrastructure
USA
Hex Technologies Inc
Analytics
USA
HubSpot
Marketing
USA
Inngest
Engineering
USA
IntouchCX Inc.
Customer support
Canada
Iterable
Marketing
USA
Looker Studio
Analytics
USA
Mailgun Technologies, Inc.
Marketing
USA
Microsoft Azure
Cloud infrastructure
USA
Neon
Database management
USA
OpenAIAI · OpenAI
AI models
USA
OpenRouter
AI model selection for Integrations
USA
Orb
Billing
USA
OWND ApS (Parahelp)
Customer Support
USA
Parallel Web Systems
AI infrastructure platform
USA
Persona Identities, Inc.
Identity verification
USA
Segment
Analytics
USA
Sentry
Cloud monitoring
USA
SideGuide Technologies, Inc. d/b/a Firecrawl
Web data extraction for AI applications
USA
Stripe
Payment processing
USA
Stytch
Analytics and identity
USA
Synadia Cloud
Cloud services
USA
Temporal Technologies Inc.
Engineering
USA
Twilio
SMS verification
USA
Verifi Inc.
Payments
USA
WorkOS
Engineering
USA
Zapier
Collaboration
USA
Zendesk
Customer support
USA
ZoomInfo
Analytics and marketing
USA
Certifications the trust page names · ISO 27001 · SOC 2 · SOC 2 Type II
Laws the trust page names · GDPR
International transfer notice · United States
“Cross-Border Data Transfers Our Services are primarily hosted in the United States and may also be hosted in locations outside of the jurisdiction in which you live.”
replit.com/privacy · read 2026-10-01
The pages' own stamps: Last updated 2026-08 · Last updated 2026-04-01 · Last updated 2026-08-03 · Last updated 2026-08-03 · Data Processing Agreement (previous version 1)
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates Replit. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Replit? With an email at replit.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Replit in your product? Hear the morning we read a change.
You get the lines that moved, in Replit’s own words, and the date any window closes. No card. Nothing to cancel.