Skip to content
Subprocessor chain

Ashby discloses 11 subprocessors. We found 595 companies beneath them.

Everything on this page comes from Ashby's own published list, stops two hops down, and is 30 days old. Watch the vendor and you get the current list, every term we record on its direct relationships, and an alert the day one moves.

No card. One vendor, free for as long as you want it.
595companies beneath Ashby
9hops to the deepest one
11direct relationships disclosed
278 vendor pages hashed daily8 languages, interface and dataPublic data as of 2026-10-06 — 30 days behind the console
Disclosed by Ashby

Amazon Web Services, Inc.

United States · infrastructure
“Not specified on page (listed only as a vendor logo/name under the Trust Center's Subprocessors section)”

Mapbox

other
“Not specified on page (listed only as a vendor logo/name under the Trust Center's Subprocessors section)”

Dropbox, Inc.

United States · hosting
“Not specified on page (listed only as a vendor logo/name under the Trust Center's Subprocessors section)”

Rudderstack

United States · analytics
“Not specified on page (listed only as a vendor logo/name under the Trust Center's Subprocessors section)”

FullStory, Inc.

United States · analytics
“Not specified on page (listed only as a vendor logo/name under the Trust Center's Subprocessors section)”

Braintrust

United States · AI and machine learning
“AI Observability & Evaluation”

Polytomic

data processing
“ETL”

Plain

customer support
“Customer Support”

Seon

security
“Optional Candidate Fraud Signal Functionality”

Assembly AI

AI and machine learning
“Optional AI Notetaker Add-on”

Purpose and service line are Ashby's own words, kept in the language they were published in — you could read them on their page, so we publish them here. Data types, transfer basis and usage are recorded, coded and filterable; those are ours, and they open with the watch. A relationship with nothing recorded shows no chips at all.

What the watch sends

The day the list moves, this lands.

Not a digest of everything — the change, its classification, the path from Ashby down to the entity that moved, and the source we read it from. The same alert covers a name added, a name removed, a jurisdiction shift and a change to the terms.

Subprocessor monitoring alerts→ you@company.comEntity added

shopware AG added Fastly, Inc.

path
Ashby → FullStory, Inc. → Fastly, Inc.
depth
2
classification
entity_added
detected
2026-09-12 01:16 UTC
source
https://www.shopware.com/en/privacy/dpa/
Sent the hour we detect it. Snapshot and diff attached.

Watch Ashby. Free, and no card.

You get the current list instead of this 30-day-old copy, every term recorded on its 11 direct relationships, and an alert the day one of them moves.

or
Public page · depth-limited to 2 · data as of 2026-10-06en — also in de, fr, es, nl, da, sv, it