Links last opened 31 October 2026. Record confirmed by a person on 3 October 2026. 1 recorded change, listed below.
Livestorm contracts through LIVESTORM SAS, registered in France. It is registered inside the EEA, so sending personal data to it is not a transfer out of the EEA. Its trust center is published at https://security.livestorm.co/. Its customer data processing agreement, also called a data processing addendum, is published by Livestorm itself; the link is below. Its sub-processor list is published by Livestorm itself; the link is below. We open those pages every day — last on 31 October 2026 — and a person last went through this record on 3 October 2026.
Reaching Livestorm is not a transfer out of the EEA: it is registered in France. This is what the record holds for where it sends personal data on, and it is not something we have checked — its sub-processor list is the place to look.
A ready row. Replace the purpose with what your client actually uses Livestorm for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Livestorm | LIVESTORM SAS | FR | CRM and marketing | n/a | https://security.livestorm.co/ |
Changes we noticed on Livestorm's own pages, each with the page we saw it on. The vendor does not publish this, and neither does anyone else.
24 October 2026
Livestorm added a security advisory to their DPA addressing recently disclosed vulnerabilities and describing their remediation efforts. This update informs you of their response to security issues affecting their systems and infrastructure.
Seen on https://security.livestorm.co/
Enter your website: each service it loads, what it is for and links to its own DPA, in a minute or two. No sign-up.
Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.
Six of them. All crm and marketing in the registry.