Todoist

todoist.com

Todoist declares 28 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and Stripe. No published changes since we first read it on Sep 21, 2026.

Subprocessors CSV · Atom DORA draft CSV what's this? · 

28 third parties.

NamePurposeLocationListed since
Amazon Bedrock AIAI provider; Models: Claude family models (Anthrophic) & Nova family models (Amazon) | AI Data Retention: Not stored | Privacy info: [Policy]( [FAQ](United States
Amazon Web Services Data elements: Personal data, account content, uploaded files; Hosting, Data ProcessingUnited States
Apple, Inc. Data elements: Reminder notifications; iOS Push NotificationsUnited States
BunnyWay d.o.o Content Delivery Network; Data elements: IP addresses, device metadataSlovenia
ChartMogul Data elements: User subscription data; Subscription AnalyticsUnited States
Convert A/B Testing Tool; Data elements: IP addresses, device metadataUnited States
Datadog, Inc. Data elements: User profile identifiers, sanitized user activity; Service MonitoringUnited States
Firebase (Google LLC) Android Push Notifications; Data elements: Android app installation IDsUnited States
Gemini Enterprise Agent Platform, formerly Vertex AI Studio (Google LLC) AI
AI Provider; Models: Gemini family models (Google) with Grounding Search and Grounding Maps & Claude family models (Anthropic) with Web Search | AI Data Retention: Ramble session data, including audio, is cached by Google for up to 24 hours to support pausing and resuming sessions, under its [session-resumption policy]( Separately, Google may log and retain prompts for up to 90 days when suspicious activity requires investigation, under its [abuse-monitoring policy]( This does not mean every voice recording is routinely stored for 90 days | Automations Search Steps for 30 days | Privacy info: [Policy]( Todoist Automations uses Google's Gemini Enterprise Agent Platform to run automations. Your use of Automations must comply with Google's applicable terms and policies: * [Google Cloud Platform Terms of Service]( * [Google Cloud Service Specific Terms (including the Generative AI Services terms)]( * [Google Cloud Acceptable Use Policy]( * [Generative AI Prohibited Use Policy](
United States
Google Analytics (Google LLC) Data elements: User profile identifiers; Product Usage MetricsUnited States
Google Cloud Platform (Google LLC) Data elements: Session audio data; Ramble session resumptionUnited States
Grounding Maps (Google LLC) Data elements: Query text, geolocation context; Location and map data groundingUnited States
Grounding Search (Google LLC) Data elements: Query text, contextual metadata; Real-time web search groundingUnited States
HubSpot, Inc. CRM Platform; Data elements: User contact information, profile identifiersUnited States
Iterable Data elements: Email address, first name, user ID, subscription plan, product usage and engagement events; MarketingIreland
Mailgun Technologies, Inc. Data elements: Inbound email content, potential PII; Inbound Email ProcessingUnited States
OpenRouter AI
AI Routing Service; Routes Automations AI requests to the approved model providers listed below | AI Data Retention: Zero-data-retention routing enforced account-wide. OpenRouter does not store prompt content. | Privacy info: [Policy]( | Reference: [Per-provider retention and logging table]( Todoist uses OpenRouter as a subprocessor to route Automations AI requests to the providers listed below, which run DeepSeek V4 Flash 0731. Approved model providers (Model: DeepSeek V4 Flash 0731): [Atlas Cloud AI Inc.]( (US), [BaseTen Labs, Inc.]( (US), [CoreWeave, Inc.]( (US), [DeepInfra, Inc.]( (US), [Fireworks.ai, Inc.]( (US), [Inceptron AB]( (Sweden, EU/EEA-only processing), [Novita AI]( (US), [Parasail, Inc.]( (US), [Siliconflow Labs Pte. Ltd.]( (Singapore), [Together Computer, Inc.]( (US), [Venice.ai, Inc.]( (US)
United States
Paddle (formerly Profitwell) Data elements: Subscription and billing data; Revenue AnalyticsUnited States
PartnerStack Data elements: Partner program data; Partnership ManagementUnited States
Porter Metrics Data elements: User profile identifiers, aggregated ads performance data (spend, impressions, clicks, conversion counts); Marketing analyticsEU
Printfection, LLC Data elements: User contact information; MerchandisingUnited States
Request Metrics (TrackJS LLC) Data elements: IP address; Website PerformanceUnited States
Sendgrid (Twilio, Inc.) Data elements: Names, email, IP addresses, account content; Transactional EmailUnited States
Sentry (Functional Software, Inc.) Data elements: User profile identifiers; Error MonitoringUnited States
Stripe, Inc. Data elements: User contact and billing data; Payment ProcessingUnited States
Temporal Technologies, Inc. (Temporal Cloud) Data elements: User instructions, workflow data (may include personal data); Workflow Orchestration, Data ProcessingUnited States
Typeform (Typeform SL) Data elements: User contact information (optional); Survey PlatformSpain
Zendesk, Inc. Customer Support; Data elements: User profile identifiers, support communicationsUnited States

Web TechnologiesCSV · Atom

Todoist's homepage made 164 requests to 24 domains, 15 services controlled by another company, and 1 domain not identified.

Advertising (6): MNTN, Inc., Capterra Inc., Spotify AB, Reddit, Inc.; reviewed: ArtsAI; usually detected as Advertising: MicrosoftAnalytics (5): Google Cloud, Meta, TikTok, LinkedIn, TikTokCookie compliance (1): OsanoOther (3): reviewed as Digital asset management: Cloudinary; Performance: Request Metrics 🦥; usually detected as Security: Amazon Web Services

15 third parties by category: Advertising 6Analytics 5Cookie compliance 1Other 3

Third parties 15 · 77 requests
Cloudinary cloudinary.com 20% of the page's requests 32
Google Cloudsubprocessor Google Analytics Google Tag Manager 6% of the page's requests 10
Microsoft clarity.ms 3% of the page's requests 5
MNTN, Inc. Mountain 2% of the page's requests 4
Meta Facebook Pixel 2.9.435 2% of the page's requests 4
TikTok TikTok Pixel 2% of the page's requests 4
Capterra Inc. Capterra 2% of the page's requests 3
LinkedIn Linkedin Insight Tag 2% of the page's requests 3
Osano Osano 2% of the page's requests 3
Spotify AB Spotify Pixel 2% of the page's requests 3
Reddit, Inc. Reddit Ads 1% of the page's requests 2
Amazon Web Servicessubprocessor on.aws <1% of the page's requests 1
ArtsAI arttrk.com <1% of the page's requests 1
Request Metrics 🦥subprocessor Request Metrics <1% of the page's requests 1
TikTok TikTok Pixel <1% of the page's requests 1
Unknown 1 · 1 request

52.22.50.55

First party 1 · 86 requests
Todoist Amazon CloudFront Amazon Web Services Astro Cloudinary Contentful GSAP HSTS HTTP/3 Microsoft Clarity Next.js Open Graph PWA Priority Hints React Webpack core-js 3.32.2 lit-html 2.8.0 52% of the page's requests 86

6 tracked companies loaded by the homepage are not in Todoist's subprocessor list. A website can use a service without it processing customer data.

Service statusCSV · Atom

Aug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: 1 incident (1 no impact stated)Aug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: 1 incident (1 no impact stated)Sep 1: no incident reportedSep 2: no incident reportedSep 3: no incident reportedSep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: no incident reportedSep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: no incident reportedOct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: no incident reportedOct 7: no incident reportedOct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: no incident reportedOct 21: no incident reportedOct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: no incident reportedOct 28: no incident reportedOct 29: no incident reportedOct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: no incident reportedNov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reportedNov 12: no incident reported

90 days agotoday

  • 2 incidents in 90 days
  • 0 major or critical
  • 2 days typical time to resolve
BeganIncidentImpactLasted
Degraded performance in the web and desktop appsno impact stated2 days
Sync and login issueno impact stated1 h 36 min
Subscriptions and Billingno impact stated10 h 29 min
Login Issues Impacting Certain Usersno impact stated1 h 35 min
The “Forward emails to Todoist” feature is not working at the momentno impact stated36 min
Todoist is downno impact stated2 h 57 min
Activity log doesn't loadno impact stated1 h 26 min

Incidents per month

0 2 4 Dec 2025: 0 incidents Jan 2026: 2 incidents (2 no impact stated) · typical time to resolve 2 h 57 min Feb 2026: 0 incidents Mar 2026: 0 incidents Apr 2026: 0 incidents May 2026: 0 incidents Jun 2026: 1 incident (1 no impact stated) · typical time to resolve 1 h 35 min Jul 2026: 0 incidents Aug 2026: 3 incidents (3 no impact stated) · typical time to resolve 10 h 29 min Sep 2026: 0 incidents Oct 2026: 0 incidents Nov 2026: 0 incidents Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

Components affected

ComponentIncidents
Content Sync API2
Web application & API2
Website2
Content Delivery Network (webapp1
Content storage1
Inbound email processing1
Search infrastructure1
Service compute environment1

As Todoist's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Incidents reported by Todoist's subprocessorsCSV · Atom

234 reported incidents in the last 30 days, by 10 of the vendors Todoist lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Todoist was involved.

DateCompanyIncidentImpactLasted
SendGridMMS Delivery Failures from Twilio to GCI United States minor3 min
SendGridSMS Delivery Failures from Twilio 10DLC to AT&T United States minor4 h 3 min
SendGridSMS Delivery Failures from Twilio to Orange Sierra Leone minorongoing
SendGridSMS Delivery Failures From Long Code Numbers to AT&T in the US minor1 h 19 min
bunny.netNetwork unavailability in Los Angeles minorongoing
SendGridSMS Delivery Delays from Twilio to MTS Kazakhstan minorongoing
SendGridSMS Delivery Failures from a Subset of Twilio Phone Numbers to Tcell Tajikistan minorongoing
SendGridMMS Delivery Delays from a Subset of Twilio Long Codes to Multiple Small Networks in United States minorongoing
SendGridSMS Delivery Failures from a Subset of Twilio Phone Numbers to K-Cell Kazakhstan minor7 h 23 min
SentryUS issues feed throwing intermittent errors minor51 min
SendGridVoice Call Failures in JP1 minor3 h 51 min
bunny.netShield Zone Update Failures minor43 min
SendGridSMS Delivery Failures from Twilio to Turkcell Turkey minor3 h 54 min
SentryAccount emails not being delivered major42 min
SendGridRetroactive Incident Impacting Twilio Usage APIs no impact stated1 min
SendGridIssue resolved minor1 h 43 min
SentryEU region replay ingestion latency minor48 min
SendGridSMS Delivery Receipt Delays from Twilio Phone Numbers to Movistar Venezuela minor3 h 26 min
HubSpotSome HubSpot tools may be unavailable for some users no impact stated51 min
SendGridGateway API (Lookup API) Failure Increase on Verizon in United States minor10 h 23 min
SendGridWhatsApp Business API Message Send Failures minor16 h 29 min
SendGridVoice Call Failures from a Subset of Twilio Phone Numbers to Chile minor19 h 20 min
SendGridVoice Call Audio Quality Degradation, Silent and One-Way Audio between Twilio and Multiple Networks in United Kingdom minor5 h 18 min
SendGridSMS Delivery Delays and Failures from a Subset of Twilio Alphanumeric Sender IDs and Long Codes to Multiple Networks in Italy minor3 h 14 min
SendGridSMS Delivery Delays and Failures from Twilio to Spusu United Kingdom minor3 h 26 min

And 209 more. All of them: CSV · Who is around them.

ChangesCSV · Atom

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for Todoist's site

Todoist transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/todoist"><img src="https://thirdpartyindex.com/badge/todoist.svg" alt="Todoist transparency rating on Third Party Index" height="20"></a>
[![Todoist transparency rating on Third Party Index](https://thirdpartyindex.com/badge/todoist.svg)](https://thirdpartyindex.com/vendors/todoist)