Links last opened 28 October 2026. Record confirmed by a person on 3 October 2026. 1 recorded change, listed below.
LegitScript contracts through LegitScript LLC, registered in United States. Its trust center is published at https://trust.legitscript.com/. Its sub-processor list is published by LegitScript itself; the link is below. We open those pages every day — last on 28 October 2026 — and a person last went through this record on 3 October 2026.
A ready row. Replace the purpose with what your client actually uses LegitScript for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| LegitScript | LegitScript LLC | US | Payments | — | — |
Changes we noticed on LegitScript's own pages, each with the page we saw it on. The vendor does not publish this, and neither does anyone else.
23 October 2026
LegitScript added nine subprocessors including 1Password, Auth0, Equifax, Google Workspace, Intercom, IronClad, Marketo, OpenAI, and Salesforce to their subprocessor list. Some of these subprocessors process data in Australia and the United Kingdom, which are not covered by EU adequacy decisions.
Seen on https://trust.legitscript.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57
Enter your website: each service it loads, what it is for and links to its own DPA, in a minute or two. No sign-up.
Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.
Six of them. All payments in the registry.