# commercetools

commercetools (commercetools.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/commercetools
- Documents last verified: 2026-09-30
- Transparency rating: 89/100 (how much it publishes, not how secure it is)
- Cite as: commercetools, Third Party Index, https://thirdpartyindex.com/vendors/commercetools (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.commercetools.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://commercetools.com/subprocessors | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://commercetools.com/dpa | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://commercetools.com/privacy | 2026-09-30 | 2026-09-30 |
| Security page | https://commercetools.com/commerce-platform/security-compliance | 2026-09-30 | 2026-09-30 |
| Status page | https://status.commercetools.com/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (8)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services EMEA SARL](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud Hosting of the Service; Provision of generative artificial intelligence services | Determined by Customer; EU (Data Center Germany), USA or Australia; EU / USA | 2026-09-30 |
| [Atlassian. Pty Ltd](https://thirdpartyindex.com/vendors/atlassian.md) | Administration of Support Tickets | EU | 2026-09-30 |
| [CrowdStrike Inc.](https://thirdpartyindex.com/vendors/crowdstrike.md) | Log Management Platform (Falcon LogScale formerly Humio) | Google EU Data Center Belgium | 2026-09-30 |
| [Functional Software, Inc. (dba Sentry)](https://thirdpartyindex.com/vendors/sentry.md) | Application monitoring management | USA | 2026-09-30 |
| Google Ireland Limited | Cloud Hosting of the Service; Provision of generative artificial intelligence services | Determined by Customer; EU (Data Center Belgium),; EU / USA; USA or Australia | 2026-09-30 |
| [Langfuse GmbH](https://thirdpartyindex.com/vendors/langfuse.md) | LLM datastream monitoring and production support for optional AI-powered features. | Germany | 2026-09-30 |
| [MongoDB Ltd.](https://thirdpartyindex.com/vendors/mongodb.md) | Database infrastructure (MongoDB Atlas) | Determined by Customer’s; Selection of Cloud Hosting of; the Service | 2026-09-30 |
| [Netlify, Inc.](https://thirdpartyindex.com/vendors/netlify.md) | Web development management | USA | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/21323)). CSV: https://thirdpartyindex.com/vendors/commercetools/subprocessors.csv

### Its own affiliates (5)

- commercetools GmbH (HQ) (Germany; Netherlands; UK; USA)
- commercetools AU Pty Ltd (Australia)
- commercetools France SAS (France)
- commercetools Group Companies (EU, UK, USA, Australia)
- commercetools Spain, S.L. (Spain)

## Compliance

As its trust center lists them.

- Audited: SOC 2, ISO/IEC 27001, PCI DSS, CSA STAR, TISAX, Cyber Essentials, HDS (France) ([evidence](https://thirdpartyindex.com/evidence/21309))
- Claimed: HIPAA, GDPR ([evidence](https://thirdpartyindex.com/evidence/21309))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 1 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api