Loading…
Links last opened 2 November 2026. Record confirmed by a person on 11 October 2026. 6 recorded changes, listed below.
Coveo Software contracts through Coveo Solutions, Inc., registered in Canada. Transfers of personal data out of the EEA are covered by Adequacy decision. Its trust center is published at https://trust.coveo.com/. Its customer data processing agreement, also called a data processing addendum, is published by Coveo Software itself; the link is below. Its sub-processor list is published by Coveo Software itself; the link is below. We open those pages every day — last on 2 November 2026 — and a person last went through this record on 11 October 2026.
The European Commission has found the country's protection essentially equivalent to the EU's, so transfers need no further mechanism.
A ready row. Replace the purpose with what your client actually uses Coveo Software for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Coveo Software | Coveo Solutions, Inc. | CA | Hosting and infrastructure | adequacy | https://www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum |
Changes we noticed on Coveo Software's own pages, each with the page we saw it on. The vendor does not publish this, and neither does anyone else.
2 November 2026
Coveo's Data Processing Addendum now includes Standard Contractual Clauses and references the EU-U.S. Data Privacy Framework as transfer mechanisms for personal data. This means Coveo has added these legal mechanisms to support cross-border data transfers where required by privacy laws.
Seen on https://www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum
27 October 2026
Coveo added four subprocessors: Amazon Web Services, Snowflake, OpenAI, and Wiz. These subprocessors process customer data including personal data in multiple countries, some of which lack EU adequacy decisions (Australia, and others noted as FX).
Seen on https://www.coveo.com/en/company/legal/privacy-and-security/sub-processors
25 October 2026
Coveo's Data Processing Addendum now references standard contractual clauses and the EU-US Data Privacy Framework as transfer mechanisms for personal data. This affects how personal data transfers outside the EU are legally justified and should be reflected in your subprocessor records and data processing agreements.
Seen on https://www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum
21 October 2026
Coveo's Data Processing Addendum now includes Standard Contractual Clauses and references the EU-U.S. Data Privacy Framework as transfer mechanisms for personal data. This matters because it specifies the legal basis Coveo uses to transfer personal data internationally, which must be documented in your records of processing and subprocessor list.
Seen on https://www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum
16 October 2026
Coveo updated its transfer mechanisms to include both Standard Contractual Clauses and the EU-US Data Privacy Framework, as documented in the Data Processing Addendum dated 03/10/2025. This changes how personal data transfers outside the EU are contractually authorized and should be reflected in your records of processing and subprocessor documentation.
Seen on https://www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum
14 October 2026
Coveo's Data Processing Addendum now includes Standard Contractual Clauses and references the EU-US Data Privacy Framework as transfer mechanisms for personal data. This update changes how personal data transfers from the EU are legally authorized and should be reflected in your records of processing activities and subprocessor documentation.
Seen on https://www.coveo.com/en/company/legal/terms-and-agreements/data-processing-addendum
Enter your website: each service it loads, what it is for and links to its own DPA, in a minute or two. No sign-up.
Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.
Six of them. All hosting and infrastructure in the registry · others that transfer the same way.