Vendor record · uipath.com
What UiPath promises about your data.
Where UiPath publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
UiPath lists its sub-processors at uipath.com/subprocessors. We last read it on October 14, 2026, and a later attempt returned HTTP 429.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between September 11, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
We couldn't quote a notice window: we haven't found a data processing agreement from UiPath anywhere we've looked.
- Window
- —
- Pages
- 5
- Copies
- 18
no window we can quote yet
pages we watch
dated copies of all its pages, since August 31, 2026
UiPath DPA
We have not found a data processing agreement published by UiPath anywhere we looked. There is no sub-processor notice window we can quote.
UiPath sub-processors
UiPath publishes a sub-processor list at uipath.com/subprocessors; we last read it on October 14, 2026, and a later attempt returned HTTP 429. We could not read named entries out of it. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
Every public change we have recorded · Where vendors publish their lists
How long UiPath keeps your data
UiPath's privacy policy (uipath.com/privacy-policy, in the copy read October 4, 2026) says: “Recordings will be kept for up to 3 months.”
Training on customer data
“We also collect information and aggregated data regarding user behavior, navigational information, device information, which helps us improve and tailor our Services and understand usage trends.”
uipath.com/privacy-policy · read 2026-10-04
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Certifications the trust page names · Cyber Essentials · FedRAMP · HITRUST · IRAP · ISO 27001 · ISO 42001 · SOC 2 · SOC 2 Type II
Laws the trust page names · HIPAA
The pages' own stamps: version 2024-06-20
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Trust and security
www.uipath.com/platform/agentic-automation/foundation/security-governance2026-10-11
Where we get nothing
What UiPath does not publish where we can read it
Of the 5 public pages we watch for UiPath, these give us nothing right now.
Data processing agreement
we have not found one published anywhere we looked
Before you conclude anything
This only means we couldn’t read it on a public page. UiPath may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates UiPath. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at UiPath? With an email at uipath.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is UiPath in your product? Hear the morning we read a change.
You get the lines that moved, in UiPath’s own words, and the date any window closes. No card. Nothing to cancel.