Links last opened 27 October 2026. Record confirmed by a person on 16 September 2026. 6 recorded changes, listed below.
Pusher contracts through Pusher Limited, registered in United Kingdom. Transfers of personal data out of the EEA are covered by Adequacy decision. Its trust center is published at https://pusher.com/security/. Its customer data processing agreement, also called a data processing addendum, is published by Pusher itself; the link is below. Its sub-processor list is published by Pusher itself; the link is below. We open those pages every day — last on 27 October 2026 — and a person last went through this record on 16 September 2026.
The European Commission has found the country's protection essentially equivalent to the EU's, so transfers need no further mechanism.
A ready row. Replace the purpose with what your client actually uses Pusher for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Pusher | Pusher Limited | GB | Communication | adequacy | https://bird.com/legal/dpa |
Changes we noticed on Pusher's own pages, each with the page we saw it on. The vendor does not publish this, and neither does anyone else.
27 October 2026
The DPA was updated with minor text changes that do not affect data processing terms or obligations.
Seen on https://bird.com/legal/dpa
22 October 2026
Pusher removed 27 lines from their data processing agreement. Without readable content from the removed text, I cannot determine what specific terms or processing details changed.
Seen on https://bird.com/legal/dpa
8 October 2026
Pusher updated their DPA. The document's text layout changed with one line added and four lines removed, but the specific content changes are not detailed enough to assess impact on data processing terms.
Seen on https://bird.com/legal/dpa
25 September 2026
We recorded a change to the sub-processor list link.
23 September 2026
Pusher's Data Processing Agreement was updated with 31 lines added and 6 removed, though the added content appears to be formatting artifacts or corrupted text rather than substantive legal changes, and the removed content consisted of product onboarding instructions that are not part of the DPA itself.
Seen on https://bird.com/legal/dpa
22 September 2026
We recorded a change to the UK transfer mechanism.
Recorded from a source other than their own pages.
Enter your website: each service it loads, what it is for and links to its own DPA, in a minute or two. No sign-up.
Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.
Six of them. All communication in the registry · others that transfer the same way.