Snapshot 16479
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Core Subprocessors ERP Integrations Learning/Training Center Legacy Enterprise Analytics Procore Pay Core Subprocessors Core Subprocessors ERP Integrations Learning/Training Center Legacy Enterprise Analytics Procore Pay Appendix A - List of Procore Subprocessors Updated April 1, 2026 Core Subprocessors Name Nature/Description of Processing Subject of Processing/Customer Personal Data Country of Processing for US Zone Country of Processing for UK Zone Amazon Web Services Infrastructure Cloud Hosting i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data, other Personal Data that Customer or its Authorized Users elect to submit to the Services S3 Buckets for storage are available to be used in the following regions: United States (default) International Customers, based on region or account configuration: Australia & New Zealand, Brazil, Canada, France, Germany, Hong Kong, Ireland, Italy, Korea, Singapore, South Africa, Sweden, Bahrain, United Kingdom S3 Buckets for storage are available to be used in the following regions: United Kingdom (default) International Customers, based on region or account configuration: Australia & New Zealand, Brazil, Canada, France, Germany, Hong Kong, Ireland, Italy, Korea, Singapore, South Africa, Sweden, Bahrain, United States Amplitude, Inc. Procore Internal Product Analytics i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States United States Anthropic, PBC Access to internal systems via MCPs: Databricks, Honeycomb, Salesforce i.e.: Authorized User Identifiers, Employment Data, Internet/Network Activity, etc. United States United States Anysphere, Inc. (d/b/a Cursor) Access to internal systems via MCPs: Databricks, Honeycomb, Salesforce i.e.: Authorized User Identifiers, Employment Data, Internet/Network Activity, etc. United States United States Auth0, Inc. (a subsidiary of Okta, Inc.) Product Authentication for Customers using MFA services i.e.: Authorized User Identifiers, Internet and Network Activity Data United States United States Braze, Inc Product messaging and notifications i.e.: Authorized User Identifiers, Internet and Network Activity Data, message content United States United States Catamorphic, Co. (d/b/a LaunchDarkly) Procore Feature Management i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States United States Cloudflare, Inc. Content Delivery Network and web application firewall i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data, other Personal Data that Customer or its Authorized Users elect to submit to the Services United States* United Kingdom* Confluent, Inc. Data Streaming platform i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data, and other data other Personal Data that Customer or its Authorized Users elect to submit to the Services United States United Kingdom, United States DataBricks, Inc. Data Analytics Reporting i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data, and other data other Personal Data that Customer or its Authorized Users elect to submit to the Services United States United Kingdom Datagrid AI (a wholly owned subsidiary of Procore) Hosting of and support for certain AI/ML functionality i.e.: Authorized User Identifiers, Employment Data, Internet/Network Activity, etc. United States United States DataDog, Inc. Cloud service observations and monitoring. Error reporting, crash analytics and mobile application processing. i.e.: Authorized User Identifiers, Internet and Network Activity Data United States United States Ecrion Software Inc. PDF Template Processing i.e.: Authorized User Identifiers United States Germany Google, LLC Firebase Cloud Messaging: required to send push notifications in Android Speech-to Text: speech to text transcription to facilitate field completion in Android i.e.: Ephemeral storage of push notification content i.e.: User recorded speech to text transcription United States** United Kingdom** Hound Technology, Inc. (d/b/a Honeycomb) Cloud service observations/monitoring, Error reporting, crash analytics i.e.: Authorized User Identifiers, Internet and Network Activity Data United States United States Microsoft Corporation Hosting of and support for OpenAI functionality on Azure infrastructure i.e.: Authorized User Identifiers, other Personal Data that Customer or its Authorized Users elect to submit to the Services United States (default) International Customers, based on region or account configuration: United Kingdom United Kingdom Pendo.io, Inc. In platform usage analytics and messaging i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States United States Proofpoint, Inc. Email protection and filtering i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States United States SmartBear Software, Inc. (d/b/a BugSnag) Procore Internal Error Message Logging i.e.: Authorized User Identifiers, Internet and Network Activity Data and Identifiers based on error United States United States Salesforce, Inc. Customer Account Management, Data Visualization Reporting, SQL i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States United States Snowflake Inc. Data Warehouse i.e.: Authorized User Identifiers, Internet and Network Activity Data, Employment Data United States United States Stream.io, Inc. (d/b/a Getstream.io) Electronic communications i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States United Kingdom Sumo Logic, Inc. Application and System log aggregation i.e.: Authorized User Identifiers United States United States Twilio Inc. Transactional and Marketing Email i.e.: Authorized Users Email Identifiers United States United States Additional Subprocessors for ERP Integrations Name Nature/Description of Processing Subject of Processing/Personal Data Country of Processing for Core Product Country of Processing for UK Zone Boomi, LP Integration Infrastructure i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States United Kingdom hh2 Cloud Services, LLC Sage ERP Connections i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States N/A Additional Subprocessors for Learning/Training Center and Certifications Name Nature/Description of Processing Subject of Processing/Personal Data Country of Processing for US Zone Country of Processing for UK Zone Nice Systems, Inc. (d/b/a CXone) Self-Service training center i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States N/A SkillJar CRM of training data i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States N/A Additional Subprocessors for Procore Legacy Enterprise Analytics Services Name Nature/Description of Processing Subject of Processing/Personal Data Country of Processing for US Zone Country of Processing for UK Zone Microsoft Corporation Azure Infrastructure / Cloud Hosting i.e.: Authorized User Identifiers, Employment Data, Internet and Network Activity Data United States N/A Additional Subprocessors for Procore Pay Name Nature/Description of Processing Subject of Processing/Personal Data Country of Processing for Core Product Country of Processing for UK Zone Alloy Labs, Inc. Compliance workflow engine, case management, and fraud monitoring functionality. i.e.: Authorized User Identifiers, Payments-Related Data United States N/A GIACT Systems, LLC Bank Account Verification i.e.: Bank Account Data United States N/A Middesk, Inc. Business Entity Verification i.e.: Business Identifiers, data required for financial regulatory compliance United States N/A Modern Treasury Corporation Direct Bank Integration/Treasury Management System i.e.: Authorized User Identifiers, Internet and Network Activity Data United States N/A Moxo, Inc. Cloud-based Business Interaction Management i.e.: Authorized User Identifiers, data required for financial regulatory compliance United States N/A Socure Inc. Verification of Individuals Associated with the Business i.e.: Authorized User Identifiers, data required for financial regulatory compliance United States N/A VeryGood Security, Inc. Payment Card Management and Storage i.e.: Payment Card Numbers United States N/A Customers may engage Procore for custom integration and professional services which may involve the use of unique Sub Processors beyond those described in this Appendix. Procore uses such Subprocessors in order to provide the highest quality of customization and connectivity for our customers. These Subprocessors will be identified in the SOW for such services and their use subject to the Agreement between Procore and the customer. *Country of processing is the United States or United Kingdom (as applicable) unless the Subscription Services are accessed from outside of the applicable region in which case Customer traffic is processed globally at the Cloudflare data center closest to the end user. **Country of processing is the United States or United Kingdom (as applicable) unless the Subscription Services are accessed from outside of the applicable region in which case Customer traffic is processed globally at the Google data center closest to the end user. Receive updates As Procore’s business grows and evolves, our Subprocessors may change. Changes to our Subprocessors will be published here. If you would like to be notified when our list of Subprocessors is updated, please subscribe using the form provided: