Links last opened 2 November 2026. Record confirmed by a person on 3 October 2026. 20 recorded changes, listed below.
Vonage Business contracts through Vonage Business Inc, registered in United States. Transfers of personal data out of the EEA are covered by EU-US Data Privacy Framework (DPF). Its trust center is published at https://www.vonage.com/legal/technical-organizational-security-practices/. Its customer data processing agreement, also called a data processing addendum, is published by Vonage Business itself; the link is below. Its sub-processor list is published by Vonage Business itself; the link is below. We open those pages every day — last on 2 November 2026 — and a person last went through this record on 3 October 2026.
A US certification scheme covered by an EU adequacy decision. Transfers to a certified US organisation need no further mechanism for the certified scope.
A ready row. Replace the purpose with what your client actually uses Vonage Business for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Vonage Business | Vonage Business Inc | US | Communication | DPF | https://www.vonage.com/legal/data/dpa/ |
Changes we noticed on Vonage Business's own pages, each with the page we saw it on. The vendor does not publish this, and neither does anyone else.
2 November 2026
The data processing agreement's timestamp was updated from October 31, 2026 to November 1, 2026, reflecting a document revision.
1 November 2026
The data processing agreement's timestamp was updated from October 30, 2026 to October 31, 2026.
31 October 2026
The date in Vonage Business's data processing agreement was updated from October 29, 2026 to October 30, 2026. This likely reflects when the document was last revised or executed.
30 October 2026
Vonage Business updated their Data Processing Agreement with a new timestamp, changing the document date from October 27, 2026 to October 29, 2026. You should review the updated DPA to identify any substantive changes to processing terms, liability provisions, or subprocessor management requirements.
28 October 2026
Vonage Business updated their Data Processing Agreement, with the timestamp changing from October 26, 2026 to October 27, 2026. You should review the updated agreement to identify any substantive changes to data processing terms or obligations.
27 October 2026
Vonage Business updated their Data Processing Agreement with a new timestamp, changing the document version date from October 25, 2026 to October 26, 2026. You should update your records of processing to reflect this latest DPA version.
26 October 2026
Vonage Business updated their Data Processing Agreement, with the effective date changed from October 24, 2026 to October 25, 2026. You should review the updated agreement to identify any substantive changes to processing terms, subprocessor policies, or data handling obligations.
25 October 2026
Vonage Business updated their Data Processing Agreement. The document modification timestamp changed from October 23, 2026 to October 24, 2026, indicating the DPA was revised.
24 October 2026
Vonage Business updated their Data Processing Agreement with a new effective date of October 23, 2026, replacing the previous date of October 22, 2026.
23 October 2026
Vonage Business updated their Data Processing Agreement with a new timestamp, changing the document date from October 21, 2026 to October 22, 2026. You should verify the DPA version in your records of processing and update any dated references to reflect this change.
22 October 2026
Vonage added affiliate subprocessors located in India, Singapore, and the United Kingdom to its subprocessor list. These countries lack EU adequacy decisions, which means personal data transfers to these affiliates require additional safeguards under data protection law.
Seen on https://www.vonage.com/legal/subprocessors/applicable-ericsson-affiliates/
22 October 2026
Vonage Business updated their Data Processing Agreement, with the effective date changing from October 20, 2026 to October 21, 2026. You should review the updated version to identify any substantive changes to processing terms, subprocessor provisions, or data protection obligations.
21 October 2026
Vonage Business updated their Data Processing Agreement. The effective date changed from October 19, 2026 to October 20, 2026.
20 October 2026
Vonage Business updated their DPA with a new timestamp, changing the document date from October 18, 2026 to October 19, 2026. You should verify whether this reflects a material change to the agreement terms or is an administrative update only.
19 October 2026
Vonage Business updated their Data Processing Agreement with a new effective date of October 18, 2026. This date change may affect when new terms take effect for processing personal data and should be reflected in your record of processing activities.
18 October 2026
Vonage Business updated their DPA with a new effective date of October 17, 2026, replacing the previous date of October 16, 2026. This date change should be reflected in your records of processing and DPA documentation.
17 October 2026
Vonage Business updated their DPA with a new effective date of October 16, 2026, replacing the previous date of October 15, 2026. You should update your records of processing to reflect the current agreement version.
16 October 2026
Vonage Business updated their data processing agreement on October 15, 2026. This timestamp change may indicate they've revised terms that affect how your organization's data is processed, so you should review the updated agreement to ensure continued compliance.
15 October 2026
Vonage Business updated their Data Processing Agreement, with the effective date changing from October 13, 2026 to October 14, 2026. You should review the updated DPA and verify your records of processing reflect the new version.
14 October 2026
We recorded changes to the transfer mechanism, the UK transfer mechanism.
See the 34 sub-processors Vonage Business lists →
Enter your website: each service it loads, what it is for and links to its own DPA, in a minute or two. No sign-up.
Worked out from the registry and what we have written: the country this vendor contracts from, the guides that answer the question this page raises, and the rest of the registry.
Six of them. All communication in the registry · others that transfer the same way.