Sub-processors

·Sub-processors

·Current as of August 28, 2026

·Welcome to Pipedrive's Sub-processors repository page.

·As specified in our Data Processing Addendum, Pipedrive may use Sub-processors to support the provision of Services ordered by a Client. This page provides important information about the identity, location, and role of each Sub-processor.

·Third-party Sub-processors are categorized by the services they provide as follows:

·Hosting and Infrastructure (used always)

·Hosting and Infrastructure (used always)

·Feature-specific (used when the Client uses or enables specific Pipedrive features or parts of Services)

·Feature-specific (used when the Client uses or enables specific Pipedrive features or parts of Services)

·AI (used when the Client uses or enables Pipedrive's AI features or parts of Services, including Pipedrive Nova)

·AI (used when the Client uses or enables Pipedrive's AI features or parts of Services, including Pipedrive Nova)

·Customer Support (used when the Client interacts with our Customer Support)

·Customer Support (used when the Client interacts with our Customer Support)

·Third-Party Sub-processors

·Processor Entity country Transfer mechanism Applicable service Type of personal data Amazon Web Services, Inc USA DPA + SCCs Module 3 for Client Data

·Hosting and CDN services. See below for Data Hosting Locations

·All Client Data stored by Clients as defined in our Terms

·Cloudflare, Inc. USA DPA + SCCs Module 3 for Client Data

·Content distribution, security, abuse prevention, and DNS services for web traffic transmitted to and from the Services. This allows Pipedrive to efficiently manage traffic and secure the Services End-user or Agent IP address Rackspace GmbH Switzerland DPA + SCCs Module 3 for Client Data Support services for AWS

·All Client Data stored by Clients as defined in our Terms Dealfront Finland Oy Finland DPA

·Service provider for the Web Visitors Feature

·Web visitors data for sites enabled by the Client Growster SAS (d/b/a Surfe) France DPA

·Service provider for Data Enrichment Features. Surfe acts as an independent data controller (with Legitimate Interest Assessment and opt-out mechanism implemented) and as a data processor on behalf of third parties. Third-party data sources may include publicly available information, customer-provided data, and data obtained through integrations or commercial data providers in compliance with applicable data protection laws. See Surfe's Privacy Policy.

·Client Data processed depends on the scope of the feature that the Client chooses to use, and may include the person's business contact information, name, email or phone of the contact that the Client wants to enrich Messagebird UK Ltd. (d/b/a Bird) England and Wales DPA

·Service provider for the Live Chat Feature in LeadBooster

·Encrypted conversations submitted through Live Chat Feature Forge Technology, Inc. (d/b/a Paragon) USA DPA + SCCs Module 3 for Client Data

·Embedded iPaaS used to build integrations for certain Marketplace apps marked accordingly

·Client Data that the Client chooses to process in order to use certain Marketplace apps marked accordingly Tet SIA Latvia DPA

·Service provider for hosting services for the Campaigns Feature

·Personal data contained within campaign messages (e.g., sender name, email address, and message delivery metadata such as IP routing and timestamps)

·Twilio SendGrid, Inc. USA DPA + SCCs Module 3 for Client Data

·Service provider for the Smart Email BCC Feature

·Emails sent to the Smart Email BCC address provided to the Client

·Amazon Web Services, Inc. USA DPA + SCCs Module 3 for Client Data

·Service provider for artificial intelligence features and functionality

·All Client Data processed within applicable AI-powered features

·Amazon Web Services, Inc. USA DPA + SCCs Module 3 for Client Data

·Service provider for artificial intelligence features and functionality

·Audio and metadata from meetings where Client has used Pipedrive Nova meeting capture, including any personal data that is discussed in the meeting Anthropic, PBC USA DPA + SCCs Module 3 for Client Data

·Service provider for artificial intelligence features and functionality

·All Client Data processed within applicable AI-powered features

·AssemblyAI Inc. USA DPA + SCCs Module 3 for Client Data

·Service provider for AI meeting intelligence feature in Pipedrive Nova

·Audio, video, and metadata from meetings where Client has used Pipedrive Nova meeting capture, including any personal data that is discussed in the meeting Hyperdoc Inc. (d/b/a Recall.ai) USA DPA + SCCs Module 3 for Client Data

·Service provider for AI meeting intelligence feature in Pipedrive Nova

·Audio, video, and metadata from meetings where Client has added Recall.ai, including any personal data that is discussed in the meeting OpenAI Ireland Limited Ireland DPA

·Service provider for artificial intelligence features and functionality

·OpenAI Enterprise's policies can be accessed on the OpenAI Enterprise website

·All Client Data processed within applicable AI-powered features

·Amplify5 Ltd. England and Wales DPA

·Service provider for customer support conversations, qualifying as a Sub-processor for Client Data if and when the Client provides Client Data in conversations with our customer support (success) specialists

·Conversations and any data provided by the Client to our support (success) team Atlassian PTY Ltd. (LOOM) Australia DPA + SCCs Module 3 for Client Data

·Loom is used to enable image, video or attachment sharing in customer support communications, and will be processing images and videos submitted by Clients for troubleshooting and support purposes

·Images, videos, or attachments that may contain personal data that the Client chooses to share with support representatives for troubleshooting and support purposes Fullview ApS Denmark DPA

·Service provider used by customer support qualifying as a Sub-processor for Client Data if and when the Client chooses to use screen sharing and co-browsing to help resolve issues

·All Client Data that the Client chooses to share during screen sharing and co-browsing sessions with support representatives Intercom R&D Unlimited Company Ireland DPA

·Service provider for customer support conversations, qualifying as a Sub-processor for Client Data if and when the Client provides Client Data in conversations with our customer support specialists

·Conversations (and any data shared) between Client and our support team

·Zight, Inc. USA DPA + SCCs Module 3 for Client Data

·Zight is used to enable screenshot, screen recording, video, audio, and attachment sharing in customer support communications for troubleshooting and support purposes

·Images, videos, or attachments that may contain personal data that the Client chooses to share with support representatives for troubleshooting and support purposes

·Pipedrive Affiliate Subprocessors

·Name Purpose Entity country Transfer mechanism

·Pipedrive Inc. Services and Support USA IGDTA, including SCC-s Pipedrive OÜ Services and Support Estonia IGDTA Pipedrive UK Ltd Services and Support United Kingdom IGDTA Pipedrive Ireland Ltd Services and Support Ireland IGDTA Pipedrive Germany GmbH Services and Support Germany IGDTA Pipedrive Latvia SIA Services and Support Latvia IGDTA

·Pipedrive Portugal Sociedade Unipessoal, Lda Services and Support Portugal IGDTA

·Pipedrive Prague s.r.o. Services and Support Czech Republic IGDTA

·Data Hosting Locations

·We currently host our data in the following AWS regions: EU (Frankfurt) EU (Dublin) UK (London) US East US West CA (Montreal) ASPAC (Sydney)

·For optimized performance and compliance, new sign-ups originating from specific regions will primarily be hosted in specific data centers: EU: for EU clients

·UK: for non-EU European, IN and EMEA clients

·ASPAC: for Asia Pacific Countries except IN CA: for Canada

·US: rest of the world.

·Note: Due to external conditions (i.e. IP mappings) company accounts can be hosted in different data centers. In case you would like to know exactly where your company's data is hosted please reach out to our Support team.