Vendor registry · Developer tools
Auth0: DPA, subprocessors and transfers
Last checked 16 September 2026. Changes to this record are tracked.
- Contracting legal entity
- Okta, Inc.
- Country of registration
- United States
- Transfer mechanism
- Standard contractual clauses (SCC)
Contract terms adopted by the European Commission that the vendor signs to protect personal data transferred outside the EEA. Usually part of the vendor's DPA.
- Data processing agreement
- https://www.okta.com/content/dam/okta---digital/en_us/legal/data-processing-addendum-en-jp-updated.pdf
- Security or trust page
- https://trust.okta.com/
What to put in your subprocessor list
A ready row. Replace the purpose with what your client actually uses Auth0 for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Auth0 | Okta, Inc. | US | Developer tools | SCC | https://www.okta.com/content/dam/okta---digital/en_us/legal/data-processing-addendum-en-jp-updated.pdf |