Companies / Netlify / Subprocessors
Netlify provides a platform to build and deploy websites and apps, with AI tools, Git, or drag-and-drop, on production infrastructure. It serves developers, product teams, and businesses building AI apps, marketing sites, SaaS apps, ecommerce, and internal tools.
Summarized from its homepage on 3 Nov 2026.
101 2nd St, Suite 575, San Francisco, CA, 94105, US
Subprocessors of Netlify
Netlify declares 26 subprocessors, including AI providers Anthropic, OpenAI, OpenRouter.
| Subprocessor | Purpose |
|---|---|
| Managed ClickHouse database services, including hosting, operation, and support of ClickHouse analytical databases. | |
| Cloud infrastructure provider supplying AWS compute, storage, networking, and managed services used to host and run Netlify infrastructure. | |
| Product analytics platform used to track user behavior, measure feature adoption, and analyze product engagement. | |
| Provider of large language models (Claude) and related AI services, accessed via API for AI-enabled features and workflows. | |
| Automated spam-filtering service (Akismet) used to detect and filter spam in comment, form, and text submissions. | |
| Logging, tracing, and monitoring platform used to ingest, store, and query event data for observability and troubleshooting. | |
| Log management and observability platform (Humio, now CrowdStrike Falcon LogScale) used for log ingestion, search, and security analytics. | |
| Observability platform providing infrastructure and application monitoring, log management, and security monitoring. | |
| Dynatrace DevCycle | Feature flag and feature management platform used to control feature releases, gradual rollouts, and experimentation. |
| Automated data movement platform providing ELT pipelines that replicate data from source systems into the data warehouse. |
16 more subprocessors
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inQuestions about Netlify
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| HIPAACompany's statement | “HIPAA”The company's own statement of compliance. There is no official HIPAA certification or registry. | 11 Nov 2026Source |
| ISO 27001Company's statement | “ISO/IEC 27001”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
| PCI DSSCompany's statement | “PCI DSS”The company's own statement. We have not checked a card network registry. | 11 Nov 2026Source |
| SOC 2 Type IICompany's statement | “Compliance programs SOC 2 Type II”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read 2 of its pages on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Netlify lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Netlify's full stack
Every vendor with its source and date, and an alert when Netlify adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call