# Adyen

Adyen declares [4 subprocessors](https://thirdpartyindex.com/vendors/adyen#subprocessors) in [its subprocessor list](https://www.adyen.com/legal/list-of-adyen-subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/458)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-21. [17 tracked vendors](https://thirdpartyindex.com/vendors/adyen#used-by) name Adyen as a subprocessor, including [Wasabi](https://thirdpartyindex.com/vendors/wasabi), [Shopify](https://thirdpartyindex.com/vendors/shopify) and [Flowmailer](https://thirdpartyindex.com/vendors/flowmailer).

Adyen (adyen.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/adyen
- Documents last verified: 2026-11-11
- Transparency rating: 68/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 0/8 (partial); Purposes 0/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 4 tracked vendors directly, 37 within two hops, 146 within three; 17 tracked vendors rely on it directly, 52 within two hops, 334 within three
- Cite as: Adyen, Third Party Index, https://thirdpartyindex.com/vendors/adyen (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.adyen.com/ | 2026-11-11 | 2026-10-02 |
| Subprocessor list | https://www.adyen.com/legal/list-of-adyen-subprocessors | 2026-11-11 | 2026-09-21 |
| Privacy policy | https://www.adyen.com/privacy-policy | 2026-11-11 | 2026-09-21 |
| Terms | https://www.adyen.com/legal/adyen-terms-and-conditions | 2026-11-11 | 2026-09-21 |
| Security page | https://www.adyen.com/privacy-policy/security | 2026-11-11 | 2026-09-21 |
| security.txt | https://www.adyen.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://status.adyen.com/ | 2026-11-11 | 2026-09-21 |

## Subprocessors (4)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | — | 2026-10-01 |
| [Google LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | — | — | 2026-10-01 |
| [Microsoft Corporation](https://thirdpartyindex.com/vendors/microsoft.md) | — | — | 2026-10-01 |
| [Oracle Corporation](https://thirdpartyindex.com/vendors/oracle.md) | — | — | 2026-10-01 |

Read from ([evidence](https://thirdpartyindex.com/evidence/458)). CSV: https://thirdpartyindex.com/vendors/adyen/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 1 Type II, SOC 2 Type II, ISO/IEC 27001, PCI DSS ([evidence](https://thirdpartyindex.com/evidence/445))

## Web Technologies

Adyen's homepage made 319 requests to 25 domains, and 13 services controlled by another company. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

13 third parties by category: Advertising 4 (Google Cloud, Microsoft, X Corp., LY Corporation); Analytics 4 (LinkedIn, Meta, Baidu, ZoomInfo); Marketing automation 1 (Adobe); A/B Testing 1 (Optimizely); Cookie compliance 1 (OneTrust); CDN 1 (UNPKG); Digital asset management 1 (reviewed: Frontify). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (13)

- Frontify: 162 requests to ffycdn.net
- Google Cloud: 46 requests to doubleclick.net, google.com, googleadservices.com, googletagmanager.com, googlesyndication.com; DoubleClick Floodlight, Google Tag Manager (its subprocessor list names it too)
- OneTrust: 12 requests to cookielaw.org, onetrust.com; OneTrust
- LinkedIn: 10 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Microsoft: 10 requests to clarity.ms, bing.com; Microsoft Advertising (its subprocessor list names it too)
- Meta: 7 requests to facebook.com, facebook.net; Facebook Pixel 2.9.433
- Optimizely: 6 requests to optimizely.com; Optimizely
- X Corp.: 5 requests to t.co, twitter.com, ads-twitter.com; Twitter Ads
- Adobe: 3 requests to marketo.net, mktoresp.com; Marketo
- Baidu: 1 request to baidu.com; Baidu Analytics (百度统计)
- LY Corporation: 1 request to yimg.jp; Yahoo! JAPAN Ads
- UNPKG: 1 request to unpkg.com; Unpkg, web-vitals 5.0.1
- ZoomInfo: 1 request to zoominfo.com; Zoominfo

### First party (1)

- Adyen: 54 requests to adyen.com; GSAP, Google Analytics, HSTS, Microsoft Clarity, Netlify, Nuxt.js, Open Graph, Priority Hints, Three.js 184, Vue.js, core-js 3.32.2

7 tracked companies loaded by the homepage are not in Adyen's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (17)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Agilysys](https://thirdpartyindex.com/vendors/agilysys.md)
- [Beebole](https://thirdpartyindex.com/vendors/beebole.md): Payment processing
- [Benevity](https://thirdpartyindex.com/vendors/benevity.md): Credit card payment processing for donors. May receive donor name, address and email only. Benevity does not collect, store or process any sensitive cardholder …
- [Flowmailer](https://thirdpartyindex.com/vendors/flowmailer.md): Payment Service Provider
- [Flywire](https://thirdpartyindex.com/vendors/flywire.md): Card acquirer
- [Light](https://thirdpartyindex.com/vendors/light.md): Card issuing and card transactions. Performs its own know-your-customer screening and processes payment data for settlement, fraud prevention and anti-money-lau…
- [Momice](https://thirdpartyindex.com/vendors/momice.md): Payment service provider, processes payments in case User uses the payment ticket services in the Momice tool
- [New Black](https://thirdpartyindex.com/vendors/new-black.md): Finance
- [Picsart](https://thirdpartyindex.com/vendors/picsart.md): Payment processing\* When you purchase paid products or services, we use Adyen to process your payment. Picsart does not collect or store your payment card detai…
- [Prezi](https://thirdpartyindex.com/vendors/prezi.md): Payment Provider
- [Rows](https://thirdpartyindex.com/vendors/rows.md): Billing software services
- [Shopify](https://thirdpartyindex.com/vendors/shopify.md): Supporting payment functionality
- [Solvimon](https://thirdpartyindex.com/vendors/solvimon.md): Payment processing
- [Tesorio](https://thirdpartyindex.com/vendors/tesorio.md): Payment Processing
- [Toggl](https://thirdpartyindex.com/vendors/toggl.md): Payment provider
- [Virtuozzo](https://thirdpartyindex.com/vendors/virtuozzo.md): Credit card processor
- [Wasabi](https://thirdpartyindex.com/vendors/wasabi.md): Credit card payment processing

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/adyen

## Security contact

From its security.txt (https://www.adyen.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/462)):

- Contact: mailto:responsibledisclosure@adyen.com
- Disclosure policy: https://www.adyen.com/policies-and-disclaimer/responsible-disclosure
- Encryption key: https://www.adyen.com/.well-known/security-pgp-key.asc
- Acknowledgments: https://www.adyen.com/policies-and-disclaimer/responsible-disclosure-hall-of-fame
- Security jobs: https://careers.adyen.com/vacancies?team=Security
- Languages: EN
- Expired 2025-12-31

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
