Snapshot 11611
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
AvePoint Sub-Processor List as of February 2026
This Sub-processor List shall be supplemental to the AvePoint Data Processing Addendum (DPA) and
the AvePoint DORA Schedule, as applicable.
1 Customer Data Storage Location / No Access to Customer Data
The geographical data storage location for Customer Data is solely determined by the
Customer. Neither AvePoint nor any AvePoint (sub-)processor will change the customer-
selected location unless instructed to do so by the Customer.
Customer Data processed with AOS Solutions is always encrypted in transit and at rest; no
AvePoint employees or AvePoint (sub-)processor can access decrypted Customer Data. The
encryption keys can be managed by the Customer.
2 Third Party Sub-Processors
AvePoint uses the services of the following Cloud Service Providers (CSPs):
CSP Operating Entity Address
(including Affiliates)
Azure Microsoft Corporation One Microsoft Way, Redmond,
Washington, 98052-6399, USA
Google Cloud Google LLC 1600 Amphitheatre Parkway Mountain
Platform View, CA 94043, USA
AWS Amazon Web Services, Inc. 410 Terry Avenue North, Seattle, WA
98109-5210, USA
A CSP stores Customer Data (such as backup data), performs computing operations and
provides the infrastructure for the AvePoint Online Services (AOS) as part of the AvePoint
Solutions. AvePoint does not operate its own storage or computing facilities for Customer Data.
3 AvePoint Sub-Processors
As a modern matrix organization, AvePoint divides certain tasks between its own group
companies (all of them direct or indirect subsidiaries of AvePoint, Inc.) which may qualify them
as sub-processors. These tasks are: 24/7 product support under a follow-the-sun model;
infrastructure maintenance to ensure proper monitoring of AOS infrastructure availability
around the clock; and regional specialist teams or subject matter experts that provide services
for the whole AvePoint group. AvePoint is committed to adhering to applicable regional data
privacy regulations in its business operations, such as GDPR and CCPA, to safeguard user data
and maintain compliance.
Depending on the region and product, additional regionalization options may be available for
support or AOS infrastructure.
Entity Country
AvePoint, Inc. USA
AvePoint Public Sector, Inc. USA
Data Processing Addendum February 2026
AvePoint Sub-Processor List PROPRIETARY Page 1 of 2
AvePoint Holdings USA, LLC USA, Philippines
AvePoint AU Pty Ltd Australia
AvePoint UK, Ltd. United Kingdom, South Africa
AvePoint Deutschland GmbH Germany, France, The Netherlands, Sweden,
Switzerland
AvePoint Japan K.K. Japan
AvePoint Singapore Pte. Ltd. Singapore
MaivenPoint Pte. Ltd. Singapore
AvePoint Technology Changchun Co. Ltd. China
Shanghai AvePoint Software Technology China
Corporation Limited
AvePoint Beijing Technology Ltd. China
AvePoint Vietnam Company Limited Vietnam
AvePoint Hanoi Company Limited Vietnam
AvePoint Canada LTD. Canada
AvePoint Korea Co., Ltd. South Korea
Combined Knowledge Limited United Kingdom
I-Access Solutions Pte Ltd Singapore
AvePoint Gulf FZCO Dubai / United Arab Emirates
AvePoint Malaysia Sdn Bhd Malaysia
Ydentic Holding B.V. The Netherlands
Ydentic B.V. The Netherlands
4 Further Information
For information about how AvePoint categorizes data please see AvePoint's Data Protection
and Information Security (DPIS) Standard at
https://www.avepoint.com/agreements/dataprotection. Capitalized terms have the meaning
as defined in the DPA, the DPIS Standard, and the Agreement.
Data Processing Addendum February 2026
AvePoint Sub-Processor List PROPRIETARY Page 2 of 2