Links last opened 16 October 2026. Record confirmed by a person on 5 October 2026. 1 recorded change, listed below.
Lusha contracts through Lusha Systems Ltd., registered in United States. Its trust center is published at https://www.lusha.com/trust-center/. Its customer data processing agreement, also called a data processing addendum, is published by Lusha itself; the link is below. Its sub-processor list is published by Lusha itself; the link is below. We open those pages every day — last on 16 October 2026 — and a person last went through this record on 5 October 2026.
A ready row. Replace the purpose with what your client actually uses Lusha for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Lusha | Lusha Systems Ltd. | US | CRM and marketing | — | https://www.lusha.com/legal/dpa-2-2/ |
Changes we noticed on Lusha's own pages, each with the page we saw it on. The vendor does not publish this, and neither does anyone else.
16 October 2026
Lusha's data processing agreement was updated with the addition of two lines of text. The specific content added does not indicate changes to processing activities, data categories, or subprocessor information that would require updates to processing records or subprocessor lists.
Enter your website: each service it loads, what it is for and links to its own DPA, in a minute or two. No sign-up.
Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.
Six of them. All crm and marketing in the registry.