Loading…
Links last opened 1 November 2026. Record confirmed by a person on 11 October 2026. 7 recorded changes, listed below.
StackOne contracts through StackOne, Company, registered in United Kingdom. Transfers of personal data out of the EEA are covered by Adequacy decision. Its trust center is published at https://trust.stackone.com/. Its customer data processing agreement, also called a data processing addendum, is published by StackOne itself; the link is below. Its sub-processor list is published by StackOne itself; the link is below. We open those pages every day — last on 1 November 2026 — and a person last went through this record on 11 October 2026.
The European Commission has found the country's protection essentially equivalent to the EU's, so transfers need no further mechanism.
A ready row. Replace the purpose with what your client actually uses StackOne for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| StackOne | StackOne, Company | GB | — | adequacy | https://www.stackone.com/terms/dpa/ |
Changes we noticed on StackOne's own pages, each with the page we saw it on. The vendor does not publish this, and neither does anyone else.
1 November 2026
StackOne added Anthropic, OpenAI, Datadog, Amazon Web Services, and Cloudflare as sub-processors. The vendor also expanded documentation of security controls across compliance, application security, data security, infrastructure, network security, and organizational policies.
Seen on https://trust.stackone.com/
29 October 2026
StackOne added six subprocessors: Anthropic, OpenAI, Datadog, Amazon Web Services, Atlassian, and Cloudflare. This requires updating the subprocessor list in records of processing and notifying customers if contractual requirements apply to subprocessor changes.
Seen on https://trust.stackone.com/
29 October 2026
StackOne updated their Data Processing Agreement to replace "Falcon Execution Engine" with "Agent Execution Engine" as a processing component.
25 October 2026
StackOne added six subprocessors: Anthropic, OpenAI, Datadog, Amazon Web Services, Atlassian, and Cloudflare. These subprocessors must be added to your records of processing and data processing agreements to maintain an accurate list of who processes your data.
Seen on https://trust.stackone.com/
24 October 2026
StackOne's data processing agreement was updated to add detailed descriptions of embedded AI agent integrations across multiple business functions including HRIS, recruiting, customer support, sales, accounting, and marketing, replacing a generic reference to use cases.
18 October 2026
StackOne added six subprocessors: Anthropic, OpenAI, Datadog, Amazon Web Services, Atlassian, and Cloudflare. These vendors must be listed in your records of processing activities and your data processing agreement should be updated to reflect these new subprocessors.
Seen on https://trust.stackone.com/
14 October 2026
StackOne updated their Data Processing Agreement to remove "Permission Policies New" and add "PII Redaction" and "Tool Policies New" as sections or policy areas covered under the agreement.
See the 6 sub-processors StackOne lists →
Enter your website: each service it loads, what it is for and links to its own DPA, in a minute or two. No sign-up.
Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.