Loading…
Links last opened 14 October 2026. Record confirmed by a person on 4 October 2026. 2 recorded changes, listed below.
Twingate contracts through Twingate Inc., registered in United States. Its customer data processing agreement, also called a data processing addendum, is published by Twingate itself; the link is below. Its sub-processor list is published by Twingate itself; the link is below. We open those pages every day — last on 14 October 2026 — and a person last went through this record on 4 October 2026.
A ready row. Replace the purpose with what your client actually uses Twingate for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Twingate | Twingate Inc. | US | Hosting and infrastructure | — | https://www.twingate.com/legal/dpa |
Changes we noticed on Twingate's own pages, each with the page we saw it on. The vendor does not publish this, and neither does anyone else.
14 October 2026
Twingate's data processing agreement was updated to replace specific dated webinar offerings with ongoing live onboarding sessions and workshops. This change affects what support and training services are referenced in the agreement documentation.
11 October 2026
Twingate updated its data transfer mechanisms to now include the EU-US Data Privacy Framework alongside Standard Contractual Clauses for transferring personal data from Europe to the United States. This matters because it provides an additional legal basis for international data transfers, which affects how personal data flows are documented in processing records and data processing agreements.
Enter your website: each service it loads, what it is for and links to its own DPA, in a minute or two. No sign-up.
Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.
Six of them. All hosting and infrastructure in the registry.