/

Companies / Amplitude / Subprocessors

Amplitude subprocessors

amplitude.com

Amplitude provides product analytics, experimentation, and AI agent tools for analyzing user behavior. It serves product, data, marketing, and engineering teams at startups and enterprises.

Summarized from its homepage on 3 Nov 2026.

Classified asAI and machine learningData and analytics

The Amplitude homepage

Subprocessors of Amplitude

Amplitude declares 9 subprocessors, including AI providers OpenAI, Amazon Bedrock.

From the company's own list.Read the source
SubprocessorPurposeLocationFirst seen
DatadogFedRAMP registryLogging and operational monitoring.United States3 Nov 2026
FivetranHIPAA statementISO 27001 statementPCI DSS statementSOC 2 statementCloud-based data movement platform.United States, Germany3 Nov 2026
GoogleGenerative AI technology, delivered via Google Vertex AI, used to enhance Amplitude's AI features; cloud hosting and infrastructure provider for the Statsig-branded Amplitude Services (US only).United States, EU3 Nov 2026
Microsoft AzureFedRAMP registryCloud service Provider for the Statsig-branded Amplitude Services.United States3 Nov 2026
MongoDBFedRAMP registryDatabase provider for the Statsig-branded Amplitude Services.United States3 Nov 2026
OpenAIFedRAMP registryGenerative AI technology used to enhance Amplitude's AI features.United States, EU3 Nov 2026
SnowflakeFedRAMP registryData warehousing services (if Customer has purchased an applicable add-on service or is using AI Feedback).United States, Germany (for AI Feedback only)3 Nov 2026
WizFedRAMP registrySecurity vulnerability management and detection.United States, Germany3 Nov 2026
amazonwebservices.comCloud hosting and infrastructure provider; generative AI technology used to enhance Amplitude's AI features (AWS Bedrock).United States, Germany3 Nov 2026

Questions about Amplitude

Certifications

StandardWhat the source saysChecked
ISO 27001Company's statement“ISO/IEC 27001 certification”The company's own statement. We have not checked an accreditation registry.10 Nov 2026Source
SOC 2 Type IICompany's statement“SOC 2 Type II certification”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA.10 Nov 2026Source

We last read 2 of its pages on 10 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Amplitude lacks it.

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See Amplitude's full stack

Every vendor with its source and date, and an alert when Amplitude adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call