Snapshot 1418

Document
Subprocessor list
URL
https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB0313167
Fetched
HTTP status
200
Content type
text/html;charset=UTF-8
Fetch mode
browser
Size
333673 bytes
SHA-256 (raw)
c250fa2feeeeaeb7590436a8f26a376790530118376929d68d5b19fcd6cd2411
SHA-256 (normalized text)
a409860090472e4ab5b3a09d549b76b6934765c5d5d0776a948dd87701f547c3

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

%kb_name - %short_descr
Sitecore Subprocessors
Switch language
English
Japanese
Permalink to this article
Description
Sitecore uses its Affiliates and a range of third-party Subprocessors to assist it in providing the Services (as described in the Agreement). The Subprocessors set out below are product-specific third-party Subprocessors, which provide cloud hosting services, application processing services, database services, email sending/tracking services, as well as incident tracking, response, diagnosis, and resolution services in the form of SaaS DXP and Platform DXP products.
Update notice (November 2025)
Sitecore has introduced SitecoreAI, which unifies Sitecore SaaS components under a single platform experience. Unless expressly stated otherwise, the Subprocessors listed below apply to SitecoreAI and to its component services. EXM Cloud and Managed Cloud Services remain separate and continue to use their own product-specific Subprocessor lists.
For customers who continue to use legacy SaaS DXP subscriptions without enabling SitecoreAI, the subprocessors applicable to their existing products remain unchanged and continue to apply under the same regional hosting and data-processing terms.
SitecoreAI Platform
Entity Name	Description of the performance	Corporate Location
Auth0	Authentication Tool	Seattle, Washington
AWS	Cloud Service Provider	Seattle, Washington
Confluent	Real-time Data Management	Mountain View, California
Cloudflare	Web performance and security services	San Francisco, California
Elastic	Observability / security monitoring	San Francisco CA USA
HTMLtoImage	Thumbnail Rendition	Leeds, England
Imgix	Image Management	San Francisco, California
Liveblocks	User Engagement and Collaboration	Wilmington, Delaware
Microsoft (Azure Open AI / Azure AI Foundry)	Generative AI Services	Redmond, Washington
Microsoft	Microsoft Azure Cloud Service Provider	Redmond, Washington
MongoDB Atlas	Database services	New York NY US
Redis	Caching and session management	Mountain View, California
SearchStax	Search Services	Manhattan Beach, California
SendGrid	Email Delivery Services	Denver, Colorado
Snowflake	Data warehouse services	Bozeman MT USA
Uploadcare	File Upload Management	Wilmington, Delaware
Vercel	Frontend Cloud Platform	San Francisco, California
Workato	Integration and workflow automation	San Francisco, California
Note: For customers selecting Singapore, Japan or Australia as their SitecoreAI region, certain functionality covered by the Gen AI Addendum may use Microsoft Azure OpenAI / Azure AI Foundry Global Standard deployment where the applicable Sitecore functionality, AI model or model version is not available to Sitecore under a Regional or Data Zone deployment for the customer’s selected region.
Where Global Standard is used, Microsoft may process AI inference data in Azure regions where the relevant model is deployed. The applicable Azure regions vary by model and may change over time, as described in Microsoft’s regional availability documentation: https://learn.microsoft.com/en-us/azure/foundry/foundry-models/concepts/models-sold-directly-by-azure-region-availability.
AI inference data may include prompts and contextual data included in the request, model outputs and completions, embeddings, image inputs and outputs, technical metadata, and prompts and outputs processed for abuse monitoring, where applicable. Customer-stored data remains in the designated Azure geography; this note addresses AI inference processing only.
SaaS DXP
Sitecore’s various SaaS DXP products are further categorized according to the functionalities they provide, namely:
Experience Management
Content Lifecycle
Commerce
Capabilities
Services
Sitecore SaaS DXP Common Subprocessors
Entity Name	Description of the performance	Corporate Location
Auth0	Authentication Tool	Seattle, Washington
Cloudflare	Web performance and security services	San Francisco, California
Elastic	Observability and Security Services	San Francisco, California
Microsoft	Microsoft Azure Services	Redmond, Washington
Microsoft (Azure Open AI)	Generative AI Services	Redmond, Washington
Experience Management
Sitecore XM Cloud (if applicable)
Entity Name	Description of the performance	Corporate Location
AWS	Cloud Service Provider	Seattle, Washington
Confluent	Real-time Data Management	Mountain View, California
HTMLtoImage**	Thumbnail Rendition	Leeds, England
Imgix**	Image Management	San Francisco, California
Redis	Caching and session management	Mountain View, California
SearchStax	Search Services	Manhattan Beach, California
Uploadcare**	File Upload Management	Wilmington, Delaware
Vercel*	Frontend Cloud Platform	San Francisco, California
* Used for Sitecore XM Cloud where purchased under the relevant Order for Services.
** Used for Sitecore XM Cloud Forms
Sitecore Search (if applicable)
Entity Name	Description of the performance	Corporate Location
AWS	Cloud Service Provider	Seattle, Washington
Confluent Kafka	Cloud Service Provider	Mountain View, California
MongoDB Atlas	Cloud Service Provider	New York, New York
Snowflake	Data Warehouse	Bozeman, Montana
Sitecore Discover (if applicable)
Entity Name	Description of the performance	Corporate Location
AWS	Cloud Service Provider	Seattle, Washington
Confluent Kafka	Cloud Service Provider	Mountain View, California
MongoDB Atlas	Cloud Service Provider	New York, New York
Snowflake	Data Warehouse	Bozeman, Montana
Sitecore Personalize (if applicable)
Entity Name	Description of the performance	Corporate Location
AWS	Cloud Service Provider	Seattle, Washington
+++ Used for Sitecore Personalize where purchased under the relevant Order for Services.
Sitecore CDP (if applicable)
Entity Name	Description of the performance	Corporate Location
AWS	Cloud Service Provider	Seattle, Washington
++ Used for Sitecore CDP where purchased under the relevant Order for Services.
Sitecore Send (if applicable)
Entity Name	Description of the performance	Corporate Location
AWS	Cloud Service Provider	Seattle, Washington
Constant Contact	Digital and Email Marketing Platform	Waltham, Massachusetts
Content Lifecycle
Sitecore Content Hub (if applicable)
Entity Name	Description of the performance	Corporate Location
Confluent
Real-time Data Management
Mountain View, California
Redis
Caching and session management
Mountain View, California
SendGrid	Email Delivery Services	Denver, Colorado
Vercel*	Frontend Cloud Platform	San Francisco, California
+ Used for Sitecore Content Hub where purchased under the relevant Order for Services.
Sitecore Experience Edge (if applicable)
Entity Name	Description of the performance	Corporate Location
Cloudflare*	Web Performance and Security Services	San Francisco, California
Redis
Caching and session management
Mountain View, California
Vercel*
Frontend Cloud Platform
San Francisco, California
* Used for Sitecore Experience Edge where purchased under the relevant Order for Services.
Commerce
Sitecore OrderCloud (if applicable)
Entity Name	Description of the performance	Corporate Location
Elastic	Observability and Security Services	San Francisco, California
Microsoft	Cloud Service Provider	Redmond, Washington
Vercel*	Frontend Cloud Platform	San Francisco, California
* Used for Sitecore OrderCloud where purchased under the relevant Order for Services.
Capabilities
Sitecore Stream (if applicable)
Entity Name	Description of the performance	Corporate Location
Liveblocks	User Engagement and Collaboration
Wilmington, Delaware
Note: For customers who select Singapore as their Azure region for Sitecore Stream, certain AI model inference requests may be processed in Microsoft Azure’s Japan East region due to model availability. All data at rest remains stored within the customer’s Singapore Azure region. Processing is governed by Microsoft’s Data Protection Addendum (DPA) and Japan’s Act on the Protection of Personal Information (APPI), which provides a protection standard comparable to Singapore’s Personal Data Protection Act (PDPA).
Sitecore Connect (if applicable)
Entity Name	Description of the performance	Corporate Location
Workato	Integration and workflow automation
San Francisco, California
EXM (if applicable)
Entity Name	Description of the performance	Corporate Location
Message Systems (Sparkpost)	Email Delivery Services	Columbia, Maryland
Services
Managed Cloud (if applicable)
Entity Name	Description of the performance	Corporate Location
Americaneagle.com	Operational support services	Chicago, Illinois, USA
Cloudflare***	Web performance and security services	San Francisco, California
Datadog***
Monitoring, and log management services
New York City, New York, USA
Elastic	Observability and Security Services	San Francisco, California
Microsoft	Cloud Service Provider	Redmond, Washington
SearchStax**	Search Services	Manhattan Beach, California
Vercel	Cloud platform	San Francisco, California
*	Used for Sitecore XP and XC version 9 and above where Premium Support is purchased under the relevant Order for Services.
**	Used for Sitecore XP and XC versions 9 and above where purchased under the relevant Order for Services.
***	Used for Sitecore Managed Cloud where purchased under the relevant Order for Services.
Affected Software:
Other
Publication Date:
October 31, 2018
Last Updated:
June 15, 2026
Helpful?