Loading…
Links last opened 1 November 2026. Record confirmed by a person on 12 October 2026. 16 recorded changes, listed below.
Scaletrix.AI contracts through Alabs AI Privacy Limited, registered in India. Its trust center is published at https://scaletrix.ai/information-security/. Its customer data processing agreement, also called a data processing addendum, is published by Scaletrix.AI itself; the link is below. Its sub-processor list is published by Scaletrix.AI itself; the link is below. We open those pages every day — last on 1 November 2026 — and a person last went through this record on 12 October 2026.
A ready row. Replace the purpose with what your client actually uses Scaletrix.AI for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Scaletrix.AI | Alabs AI Privacy Limited | IN | Analytics | — | https://scaletrix.ai/dpa/ |
Changes we noticed on Scaletrix.AI's own pages, each with the page we saw it on. The vendor does not publish this, and neither does anyone else.
1 November 2026
Scaletrix.AI's data protection addendum no longer references standard contractual clauses or adequacy decisions as transfer mechanisms, and contact information and document metadata have been removed from the accessible version. The change in transfer mechanism language may affect how cross-border data transfers are now governed under the agreement.
Seen on https://scaletrix.ai/dpa/
30 October 2026
Scaletrix.AI added four new subprocessors (Close, Render, Qualified, Root) with processing locations in India and UAE, which are third countries without EU adequacy decisions and require additional safeguards for data transfers under data protection laws.
Seen on https://scaletrix.ai/dpa/
30 October 2026
Scaletrix.AI updated its Data Protection Addendum to specify that data transfers are protected by standard contractual clauses and adequacy decisions as defined by the European Commission, UK ICO, and Swiss FDPIC. This clarifies the legal mechanism for transferring personal data from EU/EEA areas to third countries and affects how the vendor's data processing complies with international transfer requirements.
Seen on https://scaletrix.ai/dpa/
29 October 2026
Scaletrix.AI removed references to standard contractual clauses and adequacy decisions from their data transfer mechanisms, which were previously the legal basis for transferring personal data internationally. This change means the vendor no longer specifies a compliant transfer mechanism for cross-border data flows, creating potential compliance gaps for records of processing and data processing agreements that rely on these safeguards.
Seen on https://scaletrix.ai/dpa/
28 October 2026
Scaletrix.AI added four subprocessors (Close, Render, Qualified, Root) with processing locations in India and UAE, which are countries without EU adequacy decisions and require additional safeguards for data transfers under the data processing agreement.
Seen on https://scaletrix.ai/dpa/
28 October 2026
Scaletrix.AI added a Data Protection Addendum that now specifies standard contractual clauses (EU SCCs and UK Transfer Addendum) and adequacy decisions as transfer mechanisms for cross-border personal data transfers. This clarifies the legal basis for transferring customer personal data to third countries and establishes Scaletrix's obligations as a processor under GDPR and similar data protection laws.
Seen on https://scaletrix.ai/dpa/
27 October 2026
Scaletrix.AI removed references to standard contractual clauses and adequacy decisions from its data transfer mechanisms, and the document is now inaccessible, which means the data processing agreement's legal basis for international data transfers is no longer documented or available for review.
Seen on https://scaletrix.ai/dpa/
26 October 2026
Scaletrix.AI added four subprocessors (Close, Render, Qualified, Root) with processing locations in India and UAE, which are countries without EU adequacy decisions and require additional data transfer safeguards to be documented in the record of processing.
Seen on https://scaletrix.ai/dpa/
26 October 2026
Scaletrix.AI's Data Protection Addendum now specifies that data transfers rely on standard contractual clauses (EU SCCs and UK Transfer Addendum) and adequacy decisions as transfer mechanisms. This clarifies the legal basis for cross-border data transfers and affects how data flows between regions are documented in your records of processing and data processing agreements.
Seen on https://scaletrix.ai/dpa/
24 October 2026
Scaletrix.AI removed references to standard contractual clauses and adequacy decisions from their data transfer mechanisms, while the document now indicates the website is inaccessible. This means the vendor no longer explicitly commits to using established legal frameworks for transferring personal data internationally, which affects how cross-border data flows should be documented in your processing records and data processing agreements.
Seen on https://scaletrix.ai/dpa/
23 October 2026
Scaletrix.AI added four new subprocessors (Close, Render, Qualified, Root) with processing locations in India and UAE, which are countries without EU adequacy decisions and therefore require additional safeguards for data transfers under data protection laws.
Seen on https://scaletrix.ai/dpa/
23 October 2026
Scaletrix.AI's data processing agreement now explicitly references standard contractual clauses and adequacy decisions as transfer mechanisms for personal data to third countries, replacing previous language. This matters because it specifies the legal framework the vendor will use to transfer data internationally, which must be documented in your records of processing and data processing agreements.
Seen on https://scaletrix.ai/dpa/
21 October 2026
Scaletrix.AI removed standard contractual clauses and adequacy decision references from its data processing terms, eliminating documented legal mechanisms for transferring personal data internationally. The vendor's website is now inaccessible and contact information has been removed, making it unclear how to address data protection compliance going forward.
Seen on https://scaletrix.ai/dpa/
20 October 2026
Scaletrix.AI added four subprocessors (Close, Render, Qualified, Root) with processing locations in India, UAE, UK, and EU—some of which are countries without EU adequacy decisions, requiring appropriate data transfer mechanisms like Standard Contractual Clauses. The vendor's subprocessor list must be updated to reflect these new entities and their geographic locations for compliance monitoring purposes.
Seen on https://scaletrix.ai/dpa/
20 October 2026
Scaletrix.AI added standard contractual clauses and adequacy decisions as transfer mechanisms for personal data moving out of the EU Area, UK, and Switzerland to third countries, which specifies how cross-border data transfers will be legally protected under their data processing agreement.
Seen on https://scaletrix.ai/dpa/
16 October 2026
Scaletrix.AI removed references to standard contractual clauses and adequacy decisions from their data transfer mechanisms, and the document is now inaccessible at the listed IP address. This means the vendor no longer explicitly specifies how they comply with cross-border data transfer requirements under EU, UK, or Swiss data protection laws, which needs to be clarified for your subprocessor records and data processing agreement documentation.
Seen on https://scaletrix.ai/dpa/
Enter your website: each service it loads, what it is for and links to its own DPA, in a minute or two. No sign-up.
Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.
Six of them. All analytics in the registry.