Third Party Index

Snapshot 25501

Document
Subprocessor list
URL
https://www.spendesk.com/legals/subprocessors/
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
291940 bytes
SHA-256 (raw)
e3db7071485a8c1ef49c843adcbcfc2d4b171589f1ba53a07aac6be282cff23d
SHA-256 (normalized text)
1c9e7b2dee6f68c82b4ab4e27d2a6751264b5b0c591bc76d189152ec7822171f

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Skip navigation
CFO Connect Summit — 3 days. Live demos. Real workflows. From leaders at DeepL & NetSuite · Oct 13–15 👉 Register free
CFO Connect Summit — 3 days. Live demos · Oct 13–15 👉 Register free
SPENDESK SUB-PROCESSORS LIST
Version applicable as from 31.08.2026
To deliver the Services, Spendesk may engage and use data processors with access to certain personal data. This page provides important information about the identity, location and role of each sub-processor.
Spendesk group sub-processors
Name of the sub-processor	Address of the sub-processor	Details of sub-processing operations	Processing location
Spendesk España SL	Calle Serrano 90, Planta 6, 28006 Madrid	Customer service and technical support	Spain
Spendesk GmbH	c/o BA Tax, Alstertwiete 3, 20099 Hamburg, Germany	Customer service and technical support	Germany
Spendesk Italia S.R.L.	1 Corso Giacomo Matteotti, CAP 20121, Milano (MI)	Customer service and technical support	Italy
Spendesk Limited	240 Merton Road, London, England, SW19 1EQ	Customer service and technical support	United Kingdom
Third-party sub-processors
Name of the sub-processor	Address of the sub-processor	Details of sub-processing operations	Type of Personal Data processed	Processing location	Measures adopted
Airbyte, Inc.	2261 Market Street #4381 San Francisco, CA 94114, USA	Data analysis, ETL provider	Professional email address, User ID, usage data	European Union	DPA and standard contractual clauses // ISO 27001 / SOC 2 Type II
Aircall SAS	11-15, rue Saint Georges, 75009 Paris, France	Customer calls platform	Full name, professional phone number, call recordings/content	European Union / United States	DPA and standard contractual clauses // SOC 2 Type II // Aircall is auto-certified Data Privacy Framework
Amazon Web Services EMEA SARL	38 Avenue John F. Kennedy, L-1855, Luxembourg	Hosting services	Full name, professional email address and phone number, User ID, IBAN, usage data (feature), financial transactions on the Platform	European Union	DPA // AWS Compliance program: CAS / ISO 9001 / ISO 27001 / ISO 27017 / ISO 27018 / PCI DSS level 1 / SOC 1 / SOC 2 Type II / SOC 3 / FedRAMP
Amplitude, Inc.	201 3rd Street, Suite 200, San Francisco, CA 94103, USA	Data analysis for Services performance	Professional email address, User ID, usage data	European Union / United States / Canada	DPA and standard contractual clauses // ISO 27001 / ISO 27018 / SOC 2 Type II // Amplitude is auto-certified Data Privacy Framework
Anthropic Ireland, Limited (Claude Enterprise)	6th Floor, South Bank House, Barrow Street, Dublin 4, Ireland	AI assistant for internal productivity tasks	Full name, professional email address, User ID, usage data	European Union / United States	DPA and standard contractual clauses // SOC 2 Type 2 // ISO 27001 // ISO 42001
MessageBird (Bird B.V.)	Trompenburgstraat 2C, 1079 TX Amsterdam, Netherlands	SMS provider	Full name, professional email address and phone number, User ID	European Union	DPA // ISO 27001
DataDog, Inc.	620 8th Avenue, 45th Floor, New York, NY 10018, USA	Data analysis for Services performance	Connection data (logs)	European Union / United States	DPA and standard contractual clauses // ISO 27001 / ISO 27017 / ISO 27018 / SOC 2 Type II // Datadog is auto-certified Data Privacy Framework
Fivetran Inc.	1221 Broadway, Suite 2400, Oakland, CA 94612, USA	Data analysis, ETL provider	Professional email address, User ID, usage data	United States	DPA and standard contractual clauses // ISO 27001 / SOC 1 / SOC 2 Type II // Fivetran is auto-certified Data privacy Framework
Forest Admin, Inc. (operating in France through: Forest Admin)	490 Post Street, Suite 640, San Francisco, CA 94102, USA (5 rue Cadet, 75009 Paris, France)	Interface for data management	Full name, professional email address, User ID, IBAN, usage data (feature), financial transactions on the Platform	European Union / United States	DPA and standard contractual clauses
Generix Group SAS	ARTEPARC – Bât. A, 2 rue des peupliers 59810 Lesquin, France	E-invoicing platform provider	Full name, professional email address, invoice data	European Union	DPA // ISO 27001
Google Cloud France	8 rue de Londres, 75009 Paris, France	Cloud hosting and AI services	Full name, professional email address, User ID, usage data	European Union / United States	DPA and standard contractual clauses // ISO 27001 / ISO 27017 / ISO 27018 / SOC 1 / SOC 2 Type II / SOC 3 / PCI DSS
Intercom R&D Unlimited Company	2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2, Ireland	Support platform / Messaging and ticketing system	Professional email address, User ID, message content	United States	DPA and standard contractual clauses // ISO 27001 / SOC 2 Type II / CSA // Intercom is auto-certified Data Privacy Framework
Looker (Google Cloud France SARL)	8 rue de Londres, 75009 Paris, France	Data analysis	Professional email address, User ID, usage data	European Union / United States	DPA and standard contractual clauses // SOC 2 Type II / ISO 27001
Mailjet SAS	43 rue de Dunkerque, 75010 Paris, France	Email provider	Full name, professional email address, User ID	European Union	DPA
Dust (Permutation Lab SAS)	86 avenue de Wagram, 75017 Paris, France	Bot assistant for support platform	Professional email address, User ID, message content	European Union	DPA // SOC2 Type II
Salesforce.com France SAS	3 Avenue Octave Gréard, 75007 Paris, France	CRM	Full name, professional email address, professional phone number, User ID	European Union / Worldwide (support purposes)	DPA and standard contractual clauses // ISO 27001 / SOC 2 Type II
Slack (Salesforce.com France SAS)	3 Avenue Octave Gréard, 75007 Paris, France	Approval notifications	User ID, Slack ID	European Union / Worldwide (support purposes)	DPA and standard contractual clauses // ISO 27001 / 27017 / 27018 / SOC 2 / SOC 3 // SAQ-A Self-certification questionnaire applicable in the payment card industry
Segment (Twilio Ireland Limited)	70 Sir John Rogerson’s Quay, Dublin 2, D02 R296, Ireland	Data analysis, ETL provider	Full name, professional email address and phone number, User ID	European Union / United States	DPA // ISO 27001 / ISO 27017 / ISO 27018 / SOC 2 Type II
Snowflake Computing Netherlands B.V.	Gustav Mahlerlaan 300-314, 1082 ME Amsterdam, Netherlands	Data analysis	Full name, professional email address, User ID, IBAN, usage data (feature), financial transactions on the Platform	European Union / United States	DPA and standard contractual clauses // ISO 27001 / SOC 2 Type II / SOC 1 / PCI DSS / HITRUST
Tickstar AB	Vasagatan 12, 7tr, 111 20 Stockholm, Sweden	E-invoicing platform provider (Belgium)	Full name, professional email address, invoice data	European Union	DPA // ISO 27001
Zerocoma, S.L.	Calle Conde de Peñalver, 36, 28006 Madrid, España	Invoices certified digitalisation (Spanish customers only)	Full name, professional email address	European Union	DPA
Updates
The sub-processors used by Spendesk may change over time. Spendesk will update this page and notify its customers of any new or different sub-processor as appropriate and necessary.