# Spendesk

Spendesk (spendesk.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/spendesk
- Documents last verified: 2026-09-30
- Transparency rating: 76/100 (how much it publishes, not how secure it is)
- Cite as: Spendesk, Third Party Index, https://thirdpartyindex.com/vendors/spendesk (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.spendesk.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://www.spendesk.com/legals/subprocessors/ | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://www.spendesk.com/legals/privacy/ | 2026-09-30 | 2026-09-30 |
| Terms | https://www.spendesk.com/legals/terms/ | 2026-09-30 | 2026-09-30 |
| Security page | https://www.spendesk.com/spendesk-security/ | 2026-09-30 | 2026-09-30 |
| security.txt | https://www.spendesk.com/.well-known/security.txt | 2026-09-30 | 2026-09-30 |
| Status page | https://status.spendesk.com/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (21)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Airbyte, Inc.](https://thirdpartyindex.com/vendors/airbyte.md) | — | European Union | 2026-09-30 |
| Aircall SAS | — | European Union / United States | 2026-09-30 |
| [Amazon Web Services EMEA SARL](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | European Union | 2026-09-30 |
| [Amplitude, Inc.](https://thirdpartyindex.com/vendors/amplitude.md) | — | European Union / United States / Canada | 2026-09-30 |
| [Anthropic Ireland, Limited (Claude Enterprise)](https://thirdpartyindex.com/vendors/anthropic.md) | — | European Union / United States | 2026-09-30 |
| [DataDog, Inc.](https://thirdpartyindex.com/vendors/datadog.md) | — | European Union / United States | 2026-09-30 |
| Dust (Permutation Lab SAS) | — | European Union | 2026-09-30 |
| [Fivetran Inc.](https://thirdpartyindex.com/vendors/fivetran.md) | — | United States | 2026-09-30 |
| Forest Admin, Inc. (operating in France through: Forest Admin) | — | European Union / United States | 2026-09-30 |
| Generix Group SAS | — | European Union | 2026-09-30 |
| [Google Cloud France](https://thirdpartyindex.com/vendors/google-cloud.md) | — | European Union / United States | 2026-09-30 |
| [Intercom R&D Unlimited Company](https://thirdpartyindex.com/vendors/intercom.md) | — | United States | 2026-09-30 |
| [Looker (Google Cloud France SARL)](https://thirdpartyindex.com/vendors/looker.md) | — | European Union / United States | 2026-09-30 |
| [Mailjet SAS](https://thirdpartyindex.com/vendors/mailjet.md) | — | European Union | 2026-09-30 |
| [MessageBird (Bird B.V.)](https://thirdpartyindex.com/vendors/bird.md) | — | European Union | 2026-09-30 |
| [Salesforce.com France SAS](https://thirdpartyindex.com/vendors/salesforce.md) | — | European Union / Worldwide (support purposes) | 2026-09-30 |
| [Segment (Twilio Ireland Limited)](https://thirdpartyindex.com/vendors/segment.md) | — | European Union / United States | 2026-09-30 |
| [Slack (Salesforce.com France SAS)](https://thirdpartyindex.com/vendors/slack.md) | — | European Union / Worldwide (support purposes) | 2026-09-30 |
| Snowflake Computing Netherlands B.V. | — | European Union / United States | 2026-09-30 |
| Tickstar AB | — | European Union | 2026-09-30 |
| Zerocoma, S.L. | — | European Union | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/25501)). CSV: https://thirdpartyindex.com/vendors/spendesk/subprocessors.csv

### Its own affiliates (3)

- Spendesk GmbH (Germany; United Kingdom)
- Spendesk España SL (Spain)
- Spendesk Italia S.R.L. (Italy)

## Compliance

As its trust center lists them.

- Audited: ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/25603))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 65 days: 10 reported incidents (6 major or critical, 3 minor, 1 with no impact stated)
- Typical time to resolve: 2 h 53 min
- Under way: Amazon Payments – Card Tokenisation Failure (major), since 2026-09-16 14:52 UTC
- 2026-09-29: Login – Users Unable to Sign In (critical)
- 2026-09-22: Invoices : New French E-Invoices Not Received (minor)
- 2026-09-21: Login : iOS Email Links Not Completing Sign-In (minor)
- 2026-09-16: Amazon Payments – Card Tokenisation Failure (major)
- 2026-09-16: International Transfers feature is unavailable for affected EEA customers (critical)
- 2026-09-04: Third-Party Service Disruption : Email Notifications – Microsoft Service Disruption (major)
- 2026-09-04: E-invoice Processing – Partial Outage (major)
- 2026-09-02: Spendesk access is down – Major Outage (critical)

## Security contact

From its security.txt (https://www.spendesk.com/.well-known/security.txt):

- Contact: mailto:security@spendesk.com

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api