# Payhawk

Payhawk (payhawk.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/payhawk
- Documents last verified: 2026-09-29
- Transparency rating: 83/100 (how much it publishes, not how secure it is)
- Cite as: Payhawk, Third Party Index, https://thirdpartyindex.com/vendors/payhawk (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://payhawk.com/trust | 2026-09-29 | 2026-09-29 |
| Subprocessor list | https://payhawk.com/dpa#subprocessors | 2026-09-29 | 2026-09-29 |
| Data processing addendum | https://payhawk.com/dpa | 2026-09-29 | 2026-09-29 |
| Privacy policy | https://payhawk.com/privacy | 2026-09-29 | 2026-09-29 |
| Terms | https://payhawk.com/terms | 2026-09-29 | 2026-09-29 |
| Security page | https://payhawk.com/en-us/security | 2026-09-29 | 2026-09-29 |
| security.txt | https://payhawk.com/.well-known/security.txt | 2026-09-29 | 2026-09-29 |

## Subprocessors (2)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| Duffel Technology Limited | — | United Kingdom | 2026-09-29 |
| [Merge API, Inc.](https://thirdpartyindex.com/vendors/merge-api.md) | — | Sweden (AWS EU data centers) | 2026-09-29 |

Read from ([evidence](https://thirdpartyindex.com/evidence/17055)). CSV: https://thirdpartyindex.com/vendors/payhawk/subprocessors.csv

### Its own affiliates (1)

- Payhawk EOOD (Belgium and Germany (LLMs hosted on Google Cloud))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Security contact

From its security.txt (https://payhawk.com/.well-known/security.txt):

- Contact: mailto:security@payhawk.com
- Disclosure policy: https://payhawk.com/security/disclosure
- Encryption key: https://keybase.io/payhawk/pgp_keys.asc
- Security jobs: https://payhawk.com/careers/

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api