Labs / Time machine / Todoist
Todoist
The subprocessor list as we last read it, on Nov 11, 2026.
Dates are when we read the list (UTC), not when Todoist changed it. Between two readings we don't know what it said.
tall: list changed · medium: document changed · short: read, no change · x: check failed · dotted: change dates only. Tap a tick or use the date box.
We record change dates, not every check, before Oct 11, 2026.
We have published no changes to this vendor's list; our first reading was Sep 21, 2026.
Read Nov 11, 2026 · 25 companies named as a subprocessor, in 28 entries · stored document
| Name | Purpose | Location | First read |
|---|---|---|---|
| Amazon Bedrock AI | AI provider; Models: Claude family models (Anthrophic) & Nova family models (Amazon) | AI Data Retention: Not stored | Privacy info: [Policy]( [FAQ]( | United States | |
| Amazon Web Services | Data elements: Personal data, account content, uploaded files; Hosting, Data Processing | United States | |
| Apple, Inc. | Data elements: Reminder notifications; iOS Push Notifications | United States | |
| BunnyWay d.o.o | Content Delivery Network; Data elements: IP addresses, device metadata | Slovenia | |
| ChartMogul | Data elements: User subscription data; Subscription Analytics | United States | |
| Convert | A/B Testing Tool; Data elements: IP addresses, device metadata | United States | |
| Datadog, Inc. | Data elements: User profile identifiers, sanitized user activity; Service Monitoring | United States | |
| Firebase (Google LLC) | Android Push Notifications; Data elements: Android app installation IDs | United States | |
| Gemini Enterprise Agent Platform, formerly Vertex AI Studio (Google LLC) AI | AI Provider; Models: Gemini family models (Google) with Grounding Search and Grounding Maps & Claude family models (Anthropic) with Web Search | AI Data Retention: Ramble session data, including audio, is cached by Google for up to 24 hours to support pausing and resuming sessions, under its [session-resumption policy]( Separately, Google may log and retain prompts for up to 90 days when suspicious activity requires investigation, under its [abuse-monitoring policy]( This does not mean every voice recording is routinely stored for 90 days | Automations Search Steps for 30 days | Privacy info: [Policy]( Todoist Automations uses Google's Gemini Enterprise Agent Platform to run automations. Your use of Automations must comply with Google's applicable terms and policies: * [Google Cloud Platform Terms of Service]( * [Google Cloud Service Specific Terms (including the Generative AI Services terms)]( * [Google Cloud Acceptable Use Policy]( * [Generative AI Prohibited Use Policy]( | United States | |
| Google Analytics (Google LLC) | Data elements: User profile identifiers; Product Usage Metrics | United States | |
| Google Cloud Platform (Google LLC) | Data elements: Session audio data; Ramble session resumption | United States | |
| Grounding Maps (Google LLC) | Data elements: Query text, geolocation context; Location and map data grounding | United States | |
| Grounding Search (Google LLC) | Data elements: Query text, contextual metadata; Real-time web search grounding | United States | |
| HubSpot, Inc. | CRM Platform; Data elements: User contact information, profile identifiers | United States | |
| Iterable | Data elements: Email address, first name, user ID, subscription plan, product usage and engagement events; Marketing | Ireland | |
| Mailgun Technologies, Inc. | Data elements: Inbound email content, potential PII; Inbound Email Processing | United States | |
| OpenRouter AI | AI Routing Service; Routes Automations AI requests to the approved model providers listed below | AI Data Retention: Zero-data-retention routing enforced account-wide. OpenRouter does not store prompt content. | Privacy info: [Policy]( | Reference: [Per-provider retention and logging table]( Todoist uses OpenRouter as a subprocessor to route Automations AI requests to the providers listed below, which run DeepSeek V4 Flash 0731. Approved model providers (Model: DeepSeek V4 Flash 0731): [Atlas Cloud AI Inc.]( (US), [BaseTen Labs, Inc.]( (US), [CoreWeave, Inc.]( (US), [DeepInfra, Inc.]( (US), [Fireworks.ai, Inc.]( (US), [Inceptron AB]( (Sweden, EU/EEA-only processing), [Novita AI]( (US), [Parasail, Inc.]( (US), [Siliconflow Labs Pte. Ltd.]( (Singapore), [Together Computer, Inc.]( (US), [Venice.ai, Inc.]( (US) | United States | |
| Paddle (formerly Profitwell) | Data elements: Subscription and billing data; Revenue Analytics | United States | |
| PartnerStack | Data elements: Partner program data; Partnership Management | United States | |
| Porter Metrics | Data elements: User profile identifiers, aggregated ads performance data (spend, impressions, clicks, conversion counts); Marketing analytics | EU | |
| Printfection, LLC | Data elements: User contact information; Merchandising | United States | |
| Request Metrics (TrackJS LLC) | Data elements: IP address; Website Performance | United States | |
| Sendgrid (Twilio, Inc.) | Data elements: Names, email, IP addresses, account content; Transactional Email | United States | |
| Sentry (Functional Software, Inc.) | Data elements: User profile identifiers; Error Monitoring | United States | |
| Stripe, Inc. | Data elements: User contact and billing data; Payment Processing | United States | |
| Temporal Technologies, Inc. (Temporal Cloud) | Data elements: User instructions, workflow data (may include personal data); Workflow Orchestration, Data Processing | United States | |
| Typeform (Typeform SL) | Data elements: User contact information (optional); Survey Platform | Spain | |
| Zendesk, Inc. | Customer Support; Data elements: User profile identifiers, support communications | United States |
Built from the changes we published; changes we recorded without an alert (parser fixes, entries approved after review) don't appear. Where we later improved how we read a list, an earlier list may look different from the vendor's page at the time.
Gaps in our readings
No gaps since Oct 11, 2026.
All readings (38)
History starts Sep 21, 2026. Dates are UTC. Data CC BY 4.0. Shown as stored when this page was built.