Snapshot 216770

Document
Subprocessor list
URL
https://fivetran.com/docs/security-and-privacy/privacy
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
126775 bytes
SHA-256 (raw)
daf1c2b060d5ff79af989ae126f0c99e7f0df26fe501e84b04305a98e4ffe76f
SHA-256 (normalized text)
13e61aba3a235f14e0d8eeb435f6d797de83a3d4e422374cf281d94e18ed52cd

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Getting Started
Core Concepts
Connectors
Connector SDK
Destinations
Managed Data Lake Service
Context Layer
Fivetran Skills
Transformations
Activations
Logs
Security & Privacy
Security
Privacy
Privacy Archive
Fivetran IPs
Data Use and Telemetry
Developer Resources
HVR 6 Documentation
Release Notes
Privacy
Learn how Fivetran respects our users' right to privacy. For more details, see our Privacy Program Framework.
See previous versions of Fivetran Privacy policies in the Archived versions documentation.
Retention of customer data
How long we retain customer data depends on the data type:
Customer Data Type	Retention Period	Note
Customer data	< 8 hours (usually)	We purge customer data as soon as it is successfully written to the destination, except in the cases below.
Obfuscated customer data	1 week	Solely for customer troubleshooting support as needed, subject to access controls.
Temporary data	< 24 hours (usually)	Some data integration or replication processes require ephemeral data specific to a data source (for example, binary logs for MySQL or events streams for Asana). We delete this data as soon as possible, though that may take more than 24 hours in rare cases.
Event data from the Webhooks connector and other connectors using webhooks	Varies	If you sync webhooks or event data, we retain that data for a limited time so that it can be re-synced if needed. To find the data retention period for your connector type, see our Events documentation.
Customer access keys	Duration of the services	We retain customer database credentials and SaaS OAuth tokens to securely and continuously extract data and troubleshoot customer issues. These credentials are securely stored in a key management system, which is backed by a hardware security module managed by our cloud provider.
Customer metadata	Duration of the services	We retain configuration details and data points (such as table and column names) for each connection so that this information can be displayed in your Fivetran dashboard.
Email attachments collected by Email connector	Customer-managed storage: 24 hours;
Fivetran-managed storage: Duration of the services	Raw emails are retained by Fivetran for 24 hours.
For Fivetran-managed storage, we back up and store email attachments in an internal S3 bucket so that they can be re-synced if needed. These attachments are retained until you delete your Email connection.
Customer accounts	90 days after termination	Customer accounts are purged 90 days after a terminated subscription.
In the following two cases, customer data is purged as soon as it is successfully written to the destination. If the data writing process takes longer than usual, the data is automatically purged after 30 days using object lifecycle management:
Destination outage: If your destination is down, we maintain the data that we've read from your source so that we can resume the sync without losing progress once the issue is resolved.
Schema information for data blocking or column hashing purposes: If you choose to block or hash columns before running the initial sync for your new connection, we query your data source and cache your data while we fetch the full schema. We write to the destination only the data you selected as tables and columns from the fully fetched schema and only when you approved the selection.
Fivetran data residency
Fivetran runs data connections on servers in the United States (US), Canada, European Union (EU), United Kingdom (UK), Australia, Singapore, India, Japan, Indonesia, and the Middle East. You can select your preferred data processing location when configuring your destination. All connections configured in a destination run in the destination's designated location. This means that in most cases, your data will not leave our region-specific servers during processing. For example, if you configure your destination to use our EU servers, your data will not leave the EU during processing. See our destination documentation to learn how to configure your data processing location.
Certain connectors are exceptions to this policy, such as the email connector and connectors that sync webhooks and event data as well as customer support requests unless you have purchased Fivetran's U.S.-only support option. By default, we store email connector and event data in a cloud storage service in one of the following data processing locations:
the EU location - for destinations run in the EU location
the UK location - for destinations run in the UK location
the US location - for all other destinations
Fivetran runs our services on Google Cloud Platform (GCP), Amazon Web Services (AWS), and Azure. The following table lists regions supported by Fivetran for each service provider:
Geography	GCP Regions	AWS Regions	Azure Regions
US	us-east4 (N. Virginia)*
us-west1 (Oregon)
us-central1 (Iowa)	us-east-1 (N. Virginia)*
us-east-2 (Ohio)
us-west-2 (Oregon)
us-gov-west-1 (GovCloud US West)	eastus (Virginia)
eastus2 (Virginia)*
centralus (Iowa)
westus3 (Phoenix)
UK	europe-west2 (London)	eu-west-2 (London)	uksouth (London)
EU	europe-west3 (Frankfurt)	eu-central-1 (Frankfurt)*
eu-west-1 (Dublin)
eu-north-1 (Stockholm)
eu-west-3 (Paris)	westeurope (Netherlands)
germanywestcentral (Frankfurt)
Canada	northamerica-northeast1 (Montréal)	ca-central-1 (Montréal)	canadacentral (Toronto)
Australia	australia-southeast-1 (Sydney)	ap-southeast-2 (Sydney)	australiaeast (Sydney)
Singapore	asia-southeast1 (Singapore)	ap-southeast-1 (Singapore)	southeastasia (Singapore)
India	asia-south1 (Mumbai)	ap-south-1 (Mumbai)	centralindia (Pune)
Japan	asia-northeast1 (Tokyo)	ap-northeast-1 (Tokyo)	japaneast (Tokyo)
South Korea	asia-northeast3 (Seoul)	ap-northeast-2 (Seoul)	koreacentral (Seoul)
Indonesia	asia-southeast2 (Jakarta)
Middle East	me-central2 (Dammam)	uaenorth (Dubai)
Switzerland	switzerlandnorth (Zurich)
*Default region for a given cloud provider / geography combination. For some cloud providers and geographies, there is only one region available.
Google Cloud Platform is the default cloud service provider. Google Cloud Platform is your only cloud service provider if you're on a Standard or Free plan. You can select a different cloud service provider if you are on an Enterprise or Business Critical plan.
Regardless of the plan you use, you can select the Fivetran processing geography when creating a destination. Fivetran processing is specific to how we read data from your source location. If you are on an Enterprise or Business Critical plan, you also can select the cloud service provider. Lastly, if you are on a Business Critical plan, you can select a cloud region.
Plan	Choice of Geography	Choice of Service Provider	Choice of Cloud Region
Free
Standard
Enterprise
Business Critical
You need to safelist the corresponding Fivetran IPs in your firewall for the geography and region you selected for your destination.
Sub-processor management
Fivetran uses certain subprocessors to assist us in providing the Fivetran Services as described in the Terms of Service (TOS). We maintain a list of sub-processors and provide notice for any additions.
Defined terms used herein shall have the same meaning as defined in the TOS.
What is a Subprocessor?
A subprocessor is a third-party data processor engaged by Fivetran, including entities from within the Fivetran Group, who has or potentially will have access to or process personal data on behalf of a Customer. Fivetran engages different types of subprocessors to perform various functions as explained in the tables below. Fivetran refers to third parties that do not have access to or process personal data on behalf of a Customer, but who are otherwise used to provide the Services, as "subcontractors" and not "subprocessors". The list includes the ability for our customers to request a preferred email contact to receive notifications of changes. Customers may send their preferred email contact to privacy@fivetran.com.
Pipeline Data Subprocessors
These are subprocessors who have access to Fivetran production systems and data by virtue of the services they provide.
Name	Nature of Processing	Territory(ies)
Alto Logica LLC	Professional services and support use cases	Global
Amazon, Inc.	AWS hosting environment for Supplier services	Global
Axiata Digital & Analytics Sdn Bhd (dba ADA Asia, which acquired dhiOmics Analytics)	Development and support use cases	India, Southeast Asia
Danube Data Labs LLC (dba Danube Data Labs Kft.)	Professional services and support use cases	Global
Google LLC	Google Cloud hosting environment for Supplier services	Global
Grid Dynamics Holdings, Inc. (DAXX)	Professional services and support use cases	Global
AG CONSULTORÍA Y SISTEMAS DE MÉXICO, S.A. DE C.V (dba Growjet)	Professional services	Latin America
Infinite Lambda Limited	Professional services and development use cases	Global
Microsoft, Inc.	Azure hosting environment for Supplier services	Global
Okta, Inc.	Authentication and authorization for Fivetran employees	Global
phData Inc	Professional services	US, India
SunnyData Inc.	Professional services	US, Latin America
WMBE Payrolling Inc (dba TCWGlobal)	Professional services	US
AI Subprocessors
Name	Nature of Processing	Territory(ies)
Anthropic PBC	Development and support use cases and generative artificial intelligence services	Global
Amazon Web Services, Inc.	AWS Bedrock for AI product and development use cases	Global
Baseten Labs, Inc.	Inference infrastructure provider for hosting and serving AI models	Global
Cohere Inc.	Development and support use cases	Global
Fireworks.ai, Inc.	Inference infrastructure provider for hosting and serving AI models	Global
Google LLC	Development and support use cases and generative artificial intelligence services	Global
OpenAI, L.L.C.	Development and support use cases and generative artificial intelligence services	Global
Affiliates
Fivetran Inc. maintains affiliate companies in countries where our full-time employees work. Each of these affiliate companies comprises members of the Fivetran team who contribute from outside the United States.
Name	Nature of Processing	Territory(ies)
Fivetran Canada Inc.	Fivetran affiliate company	Canada
Fivetran Data Australia Pty Ltd	Fivetran affiliate company	Australia
Fivetran Data Pipeline Limited	Fivetran affiliate company	Ireland
Fivetran Germany GmbH	Fivetran affiliate company	Germany
Fivetran India Pvt. Limited	Fivetran affiliate company	India
Fivetran UK Limited	Fivetran affiliate company	United Kingdom
HVR Software BV	Fivetran affiliate company	Netherlands
Ogranak HVR Software BV – Fivetran Novi Sad	Fivetran affiliate company	Serbia
Fivetran Japan KK	Fivetran affiliate company	Japan
Sutro Labs, Inc. (dba Census)	Fivetran affiliate company	US, UK, and Canada
Tobiko Software LLC	Fivetran affiliate company	US, UK, Canada, New Zealand, and Greece
dbt Labs, LLC	Fivetran affiliate company	US, Ireland
Access
Please see our Data Access process for more detail on how we access customer data.
Additionally, for customers that cannot have data access from countries outside of the United States, Fivetran offers U.S. only support for an additional cost.
Fivetran uses a single sign-on (SSO) service to manage access control and permission provisioning, based on user role within the organization. Role-based access is established through Fivetran’s single sign-on providers which is integrated with Fivetran’s Human Resources system. Employee role assignments are automatically updated when employment is terminated or departments/roles change. In addition, Fivetran performs quarterly user access reviews of access to customer facing systems.
Questions
Ensuring our platform is built with privacy is vital to earning and maintaining our customers’ trust. As a leader in automated data integration, we strive to keep Fivetran easy to use while keeping privacy top of mind. To learn more about Fivetran, contact our sales team at sales@fivetran.com. To report a privacy concern, email us at privacy@fivetran.com or DPO@fivetran.com.
Thanks for your feedback!
Was this page helpful?
On this page
More from Fivetran
Fivetran status
Contact us