Last Modified on August 2026
Where Duda, Inc. and its affiliates (collectively, “Duda”) acts as Processor, we engage the following third party sub processors to assist in providing You and Your Clients the Services described in the agreement attached or incorporated by reference into the ordering document previously executed by You, referred to generically herein as the “Duda Contract”. Defined terms used herein shall have the same meaning as defined in the Duda Contract.
A sub processor is a third party data processor engaged by Duda, including entities from within the Duda group, who have or potentially will have access to or process the Content of Your Clients (which may contain Personal Data). Duda engages different types of sub processors to perform various functions as explained below.
Prior to engaging with a sub processor, Duda takes steps to verify the sub processor’s general data protection obligations, which includes security and legal analysis. Each sub processor is subject to contract terms that enforce compliance with applicable data protection laws.
This list is subject to change. If we have entered into SCCs with You and You’d like to be notified of updates, please email legal@duda.co.
Infrastructure. We use the following sub processors to provide the cloud infrastructure environment and storage necessary for Duda to provide the Services:
| Sub processor | Country | Purpose |
|---|---|---|
| Amazon Web Services, Inc. | USA, Germany | Hosting |
| Logz.io Inc. | USA/Israel | Application Monitoring |
| Rookout | USA | Application Debugging |
Processing of Your Content. We work with various sub processors that monitor, maintain and otherwise support the Services. To provide this functionality, these sub processors may, but not necessarily will, have access to Content:
| Sub processor | Country | Purpose |
|---|---|---|
| Atlassian Pty. Ltd. | Australia | Bug Tracking / Application Monitoring |
| Ecwid, Inc. | USA | Ecommerce Services |
| Google, Inc. (Google Analytics) | USA | Website Analytics |
| Logz.io Inc. | Log management and observability | |
| Mixpanel, Inc. | USA | Website Analytics |
| NewRelic | USA | Application Performance Monitoring |
| PayPal | USA | Payment Processing |
| Peec.AI | Germany | AI Search Analytics |
| Domo Inc. | USA | Business Intelligence |
| SendGrid, Inc. (Twilio) | USA | Email Service Provider |
| Stripe | USA | Payment processing |
| Twilio | USA | Communications API |
| Zendesk, Inc. | USA | Customer Service & Support |
| Filestack, Inc. | USA | File Handling Service |
| Mapbox, Inc. | USA | Map service |
| Zapier | USA | Automation & Integration Platform |
| ZoomInfo, Inc. | USA | Customer support tool |
| OpenAI | USA | AI Assistant |
| Runware | UK | AI Image Generation |
| Anthropic & Claude.AI | USA | AI Assistant |
| Google Vertex | USA | |
| Cal.com | USA | Booking platform |
Incidental Account Administration and Support. We use the following sub processors who provide incidental support services and account administration for our customers.
| Sub processor | Country | Purpose |
|---|---|---|
| Google, Inc. | USA | Email and Cloud Storage of Documents; Internal Communications |
Duda Group Sub processors. The following entities are members of the Duda Group. Accordingly, they function as sub processors to provide the Services:
| Entity | Country |
|---|---|
| DudaMobile D.M. LTD | Israel |
| SnipCart, Inc. | Canada |
| Duda UK Ltd. | United Kingdom |
App Store Partners: Duda offers third party Apps or other third party technology that You may add to Your Sites to enhance Your Duda powered Sites. Should You choose to install a third party technology, the third party companies may, but will not necessarily, have access to Your Content. Please note that any use of third party technology is governed by such third party’s privacy policy, and Duda is not a party to such agreement.