Sub-processors
Clerk.io engages the following third-party service providers ("sub-processors") to assist in delivering our services. Each provider is vetted for security and privacy, and is bound by contractual data-processing obligations.
Infrastructure & Hosting
Cloud Services
| Sub-processor | Purpose | Processing location |
| Amazon Web Services (AWS) | Primary cloud service provider for data storage and processing | EU (Ireland) |
Monitoring & Analytics
| Sub-processor | Purpose | Processing location |
| Datadog, Inc. | Application and infrastructure monitoring, logs, and metrics | United States |
| Functional Software, Inc. (d/b/a Sentry) | Error tracking and performance monitoring | United States |
Messaging & Communications
Email Services
| Sub-processor | Purpose | Processing location | Notes |
| Postmark, Inc. | Email delivery for verification and transactional messages | United States | Default |
| Mailgun Technologies, Inc. | Email delivery infrastructure (optional) | United States | Alternative ESP – selectable in Clerk Email settings |
| MessageBird B.V. (d/b/a SparkPost) | Email delivery infrastructure (optional) | United States | Alternative ESP – selectable in Clerk Email settings |
| Twilio SendGrid, Inc. | Email delivery for authentication emails | United States | Used by Clerk Identity for sign-in/up flows |
AI Processing
Large Language Model Inference
| Sub-processor | Purpose | Processing location | Notes |
| OpenAI, L.L.C. | Generating chat responses and email drafts using Large Language Models (LLMs) | United States | Receives chat content or email body text; no other customer data is transmitted |
Payments
Payment Processing
| Sub-processor | Purpose | Processing location |
| Stripe, Inc. | Payment processing for Clerk.io subscriptions | United States |
Data Protection
All sub-processors are contractually required to implement appropriate technical and organisational measures to safeguard personal data and to process such data solely for the purposes of providing their services to Clerk.io.
Updates to Sub-processors
We will notify customers at least 30 days in advance of any addition or replacement of sub-processors. Objections may be raised in accordance with our Data Processing Agreement (DPA).
Note: This list is maintained as part of our Data Processing Agreement (DPA). For the most up-to-date information, please refer to our official sub-processor registry.