Xither
Sign inStart free trial

Reference

Where AI vendors publish their sub-processor lists and DPAs

There is no convention for these URLs. OpenAI publishes under /policies/, Adobe at /privacy/sub-processors.html, HubSpot on a legal subdomain, Salesforce inside a compliance portal. This is the list we built to read them on a schedule.

198 pages across 142 vendors, last read on the dates shown. 63 vendors publish both documents where we can read them.

1 refused our reader. Their pages exist and a person with a browser can open them. That is recorded as a refusal, never as an absence.

6sense

Abnormal Security

Ada

Adept

Data processing agreement: the page we found was not that document — https://adept.ai/policies/dpa

Adobe

AI21 Labs

Airtable

Algolia

Alteryx

Data processing agreement: published as a PDF we could not extract text from — https://alteryx.com/dpa

Amazon Web Services

Anthropic

Anyscale

Anysphere

Data processing agreement: answered, but the page was not found — https://cursor.com/legal/dpa

Asana

AssemblyAI

Atlassian

Automation Anywhere

Baseten

Beamery

BigPanda

Sub-processor list: answered HTTP 304 — https://bigpanda.io/legal/subprocessors

Box

Braintrust

Braze

Cerebras

Data processing agreement: not-html:application/pdf — https://cerebras.net/dpa

Check Point

Chroma

Cisco

Clari

ClickHouse

Cloudera

Cognition

Comet

Data processing agreement: answered with too little text to read — https://comet.com/legal/dpa

Data processing agreement: answered, but the page was not found — https://comet.com/dpa

Sub-processor list: answered with too little text to read — https://comet.com/legal/subprocessors

Confluent

Corti

Coveo

Darktrace

Databricks

Datadog

Dataiku

Dataminr

DataRobot

Decagon

Demandbase

DocuSign

Domino Data Lab

Eightfold AI

ElevenLabs

Encord

Featurespace

Fiddler AI

Fireflies.ai

Freshworks

GitHub

GitLab

Glean

Data processing agreement: published as a PDF we could not extract text from — https://glean.com/legal/dpa

Sub-processor list: answered HTTP 304 — https://glean.com/legal/subprocessors

Gong

Google Cloud

Gretel.ai

Data processing agreement: the page we found was not that document — https://www.nvidia.com/en-us/networking/products/data-processing-unit/

Groq

H2O.ai

Harvey

Hebbia

HiddenLayer

HighRadius

HireVue

Hive

HubSpot

Hugging Face

Humanloop

Sub-processor list: answered HTTP 304 — https://humanloop.com/policies/subprocessors

IBM

Insider

Intercom

Jasper

JetBrains

Landing AI

LangChain

Data processing agreement: published as a PDF we could not extract text from — https://langchain.com/dpa

Langfuse

LiveKit

LogicMonitor

Lovable

Lucidworks

Luminance

Microsoft

Mistral AI

Data processing agreement: answered HTTP 304 — https://legal.mistral.ai/terms/data-processing-addendum

Modal

Monday.com

MongoDB

Moogsoft

Moveworks

n8n

Nabla

Nebius

New Relic

Notion

Nuance

Data processing agreement: the page we found was not that document — https://nuance.com/legal/dpa

Sub-processor list: the page we found was not that document — https://nuance.com/legal/subprocessors

Numerai

Data processing agreement: answered, but the page was not found — https://numer.ai/legal/dpa

Sub-processor list: answered, but the page was not found — https://numer.ai/legal/subprocessors

NVIDIA

Data processing agreement: the page we found was not that document — https://www.nvidia.com/en-us/networking/products/data-processing-unit/

OpenAI

Otter.ai

Outreach

PagerDuty

Palantir

Paradox

Pega

Persado

Phenom

Pinecone

PolyAI

Poolside

Data processing agreement: answered HTTP 304 — https://poolside.ai/legal/dpa

Portkey

Qodo

Data processing agreement: answered HTTP 304 — https://www.qodo.ai/data-processing-addendum/

Qualtrics

Redis

Relevance AI

Replit

Rev

Salesforce

Salesloft

SAS

Scale AI

SeekOut

Sema4.ai

Data processing agreement: published as a PDF we could not extract text from — https://sema4.ai/dpa

SentinelOne

Data processing agreement: the page we found was not that document — https://sentinelone.com/legal/dpa

Smartsheet

Snowflake

Snyk

Spellbook

Splunk

TensorWave

UiPath

Vercel

Vespa

Viso.ai

Data processing agreement: refused our reader (the page exists; we were blocked) — https://viso.ai/legal/dpa

Sub-processor list: refused our reader (the page exists; we were blocked) — https://viso.ai/legal/subprocessors

Weaviate

Weights & Biases

Wiz

Workato

Workday

xAI

Zapier

Zendesk

Zscaler

How to read a missing row

A vendor with no URL here is one we have not found a page for. Ask them: “where do you publish your sub-processor list, and how will you tell me when it changes?” The answer belongs in your file whatever it is.

A vendor marked as refusing our reader is a different case. The page is published; an automated reader was blocked. Open it yourself.

Corrections go to contact, and a vendor can claim its record at for vendors. Both are free.