Secureframe Subprocessors
Last Updated: August 12, 2026
To support delivery of our Services, Secureframe, Inc. ("Secureframe") (or one of its Affiliates) uses service providers (each, a "Subprocessor") that may store and process Customer Data (which may contain personal data). This page provides important information about the identity, location and role of each Subprocessor. Secureframe engages different types of sub-processors to perform various functions as explained below. Terms used on this page but not defined have the meaning set forth in the Terms of Service or if applicable, the superseding written agreement between Secureframe and Customer (the "Agreement").
Third Parties
Secureframe currently uses the following third party Subprocessors to provide infrastructure services, certain support related activities and email notifications. Additional Subprocessors may be identified within the product via “just-in-time” notices, where a customer must opt-in to use a certain feature that is powered by an additional Subprocessor.
Prior to engaging any Subprocessor, Secureframe performs commercially reasonable diligence to evaluate their security, privacy and confidentiality practices, and executes an agreement implementing its applicable obligations.
Subprocessors
Core Platform
These subprocessors support the Secureframe platform for all customers.
| Entity Name | Purpose for Processing | Entity Country |
|---|---|---|
| Amazon Web Services | Cloud Infrastructure and Hosting | United States / United Kingdom |
| Cloudflare | Content Delivery and DNS | United States |
| Datadog | Logging and Monitoring | United States |
| Intercom (Fin) | Customer Support Messaging | United States |
| LaunchDarkly (Catamorphic Co.) | Feature Flag Management | United States |
| PostHog | Product Analytics | United States |
| Salesforce | Customer Support and Account Management | United States |
| Sentry (Functional Software, Inc.) | Error Identification, Tracking and Resolution | United States |
| Twilio | Email Communications and Product Notifications | United States |
| Vitally | Customer Support and Account Management | United States |
| Front | Customer Support and Account Management | United States |
Secureframe Defense
These subprocessors are engaged only for customers using Secureframe Defense.
| Entity Name | Purpose for Processing | Entity Country |
|---|---|---|
| Microsoft | Cloud Infrastructure and Hosting | United States |
| NinjaOne | Device Management | United States |
AI-Enabled Features
These subprocessors are engaged only where a customer enables AI-powered features.
| Entity Name | Purpose for Processing | Entity Country |
|---|---|---|
| Anthropic | AI-Powered Product Features | United States |
| OpenAI | AI-Powered Product Features | United States |
Integrations
These subprocessors are engaged only where a customer enables the corresponding integration.
| Entity Name | Purpose for Processing | Entity Country |
|---|---|---|
| Finch (Profound Platform Inc.) | HR Integration Tool | United States |
| Leen | Platform Integration Aggregator | United States |
| OneSchema | Data Import Structuring | United States |
| WorkOS | Single Sign-On and Directory Sync | United States |
Updates
As our business grows and evolves, the Subprocessors we engage may change. We will provide the owner of Customer’s account with notice of any new Subprocessors and an opportunity to object, in accordance with the Agreement, along with posting such updates here.