PCI Pal
PCI Pal declares 10 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Microsoft, Salesforce and Datadog. No published changes since we first read it on Nov 7, 2026. 1 tracked vendor, 8x8, names PCI Pal as a subprocessor.
Not loaded by any published homepage.
Subprocessors CSV of PCI Pal's subprocessors · Atom feed of PCI Pal's subprocessors DORA draft CSV of PCI Pal's subprocessors as declared by PCI Pal what's this? ·
10 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Allego | PCI Pal uses Allego as a sub-processor to support sales enablement activities, including training content delivery and sales call/presentation review. Allego operates under its own compliance certifications and maintains documentation governing the processing of any personal data involved. Further detail on Allego's compliance posture is available via the Allego Trust Centre. | US | |
| Amplemarket | PCI Pal uses Amplemarket as a sub-processor to support sales prospecting and outreach activities, including identifying, enriching, and engaging prospective customer contacts. Amplemarket operates under its own compliance certifications and maintains documentation governing the processing of any personal data involved. Further detail on Amplemarket's compliance posture is available via the Amplemarket Trust Centre. | US | |
| Datadog | Real-time cloud monitoring and observability platform that tracks metrics, logs, and traces across applications, servers, and infrastructure. | US, EU | |
| DocuSign | PCI Pal uses DocuSign as a sub-processor to facilitate secure electronic signature and document execution processes. This supports the handling of contracts, agreements, and related documentation as part of PCI Pal's business operations. DocuSign operates under its own extensive compliance certifications (including ISO 27001 and SOC 2) and maintains a Data Processing Agreement (DPA) governing the processing of any personal data involved. Further detail on DocuSign's compliance posture is available via the DocuSign Trust Centre. | US, EU | |
| Elastic | PCI Pal uses Elastic as a sub-processor to support logging, search, and monitoring functions within its technical infrastructure. Elastic operates under its own compliance certifications and provides a Data Processing Agreement (DPA) governing the processing of any personal data involved. Further detail on Elastic's compliance posture is available via Elastic's Trust and security documentation. | EU, US, UK | |
| Ironclad | PCI Pal uses Ironclad as a sub-processor to support contract lifecycle management, including the drafting, review, approval, and archiving of contracts and related agreements. Ironclad operates under its own compliance certifications and maintains documentation governing the processing of any personal data involved. Further detail on Ironclad's compliance posture is available via the Ironclad Trust Centre. | US | |
PCI Pal uses LinkedIn Sales Navigator as a sub-processor to support sales prospecting and business development activities, including identifying and researching prospective customer contacts. LinkedIn operates under its own compliance certifications and maintains a Data Processing Agreement (DPA) governing the processing of any personal data involved. Further detail on LinkedIn's compliance posture is available via the LinkedIn Trust Centre. | US | ||
| Microsoft 365 | PCI Pal uses Microsoft 365 as a sub-processor to support core business operations, including email, collaboration, and document storage (via Teams and related services). Microsoft operates under its own extensive compliance certifications (including ISO 27001, SOC 2, and PCI DSS) and provides a documented Service Level Agreement (99.9% availability). Further detail on Microsoft's compliance posture is available via the Microsoft Service Trust Portal. | Global | |
| SafeBase | PCI Pal uses SafeBase (Advanced package) as a sub-processor to operate its Trust Centre and to automate responses to customer and prospect security questionnaires. The platform maintains a trust content library of approved question-and-answer pairs and matches incoming questionnaire questions against this library to generate draft responses for human review. SafeBase is a vendor-hosted, cloud-based platform — PCI Pal does not provision or maintain any underlying infrastructure — and integrates with Salesforce to verify account and NDA/commercial status as part of the Trust Centre access process. Further detail on SafeBase's compliance posture is available via the SafeBase Trust Centre. | US | |
| Salesforce | PCI Pal uses Salesforce as a sub-processor to support customer relationship management (CRM) activities, including the storage and management of customer and prospect data. Salesforce operates under its own extensive compliance certifications (including ISO 27001, SOC 2, and PCI DSS) and maintains a Data Processing Agreement (DPA) and Transfer Agreement governing the processing and international transfer of any personal data involved. Further detail on Salesforce's compliance posture is available via the Salesforce Trust site. | Global |
Web TechnologiesCSV of PCI Pal's web technologies · Atom feed of PCI Pal's web technologies
PCI Pal's homepage made 219 requests to 7 domains, and 3 services controlled by another company.
3 third parties by category: Analytics 2Cookie compliance 1
Third parties 3 · 17 requests
First party 1 · 202 requests
PCI Pal Cloudflare GSAP Google Font API HSTS HTTP/3 MySQL Open Graph PHP Priority Hints RSS Swiper WP Engine WP Rocket WordPress WordPress Block Editor WordPress Site Editor jQuery 3.7.1 jQuery Migrate 3.4.1 202
3 tracked companies loaded by the homepage are not in PCI Pal's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (1)CSV of the companies listing PCI Pal · Atom feed of the companies listing PCI Pal
- 8x8 8x8.com PCI Card data [This sub processor is only used if Securepay is ordered]; Software Provider [as a Service Provider]
Incidents reported by PCI Pal's subprocessorsCSV of incidents reported by vendors PCI Pal lists · Atom feed of incidents reported by vendors PCI Pal lists
9 reported incidents in the last 30 days, by 4 of the vendors PCI Pal lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that PCI Pal was involved.
| Date | Company | Incident | Impact | Lasted |
|---|---|---|---|---|
| | mOLTP PrivateLink connectivity issue | major | 13 h 28 min | |
| | Metrics query are disrupted | major | 2 h 29 min | |
| | Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder | major | 56 min | |
| | Elastic Support Portal is unavailable | major | 2 h 29 min | |
| | Dialer - Potential Issue with Transcriptions | no impact stated | 1 h 5 min | |
| | 403 error when trying to access Autoops in newly created serverless projects | major | 9 h 30 min | |
| | Third-party Signature Platform (Dropbox Sign) is currently experiencing an issue. | major | 1 h 25 min | |
| | Elastic Cloud scaling issues in Azure | major | 6 h 57 min | |
| | Degraded availability for some Elastic Cloud Hosted and Serverless deployments in GCP europe-west2 (London) | major | 15 h 2 min |
ChangesCSV of PCI Pal's changes · Atom feed of PCI Pal's changes
See the list as we read it on any date: Time machine
None since tracking began.
Rating badge for PCI Pal's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/pci-pal"><img src="https://thirdpartyindex.com/badge/pci-pal.svg" alt="PCI Pal transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/pci-pal)