Legal

Subprocessor List

Last Updated: August 13, 2026

This list identifies third parties authorized to process Customer Personal Data on ClearMark’s behalf in connection with the Services.

Scope. Capitalized terms not defined here have the meanings given in the ClearMark Data Processing Addendum (DPA). This list is limited to subprocessors that may Process Customer Personal Data for the ClearMark Services. Vendors that support ClearMark’s general corporate operations, source-code management, sales, billing, or other activities do not appear here unless they Process Customer Personal Data on ClearMark’s behalf.

This Data Processing Addendum ("DPA") is between ClearMark LLC ("ClearMark") and the customer entity ("Customer") that has entered into ClearMark's Terms of Use, an Order Form, or another written agreement for the Services (the "Agreement"). It applies to the extent ClearMark Processes Personal Data on Customer's behalf. If this DPA conflicts with the Agreement regarding Processing of Customer Personal Data, this DPA controls.

Current Subprocessors

Subprocessor. Amazon Web Services, Inc. (AWS)

Purpose. Cloud hosting, compute, storage, databases, authentication, encryption/key management, logging, monitoring, and backup.

Data Categories. Customer Personal Data; account/authentication data; application data; system/security logs; encrypted backups, as applicable.

Processing Location. United States; primary production region: AWS US East (N. Virginia). Other locations may apply under the AWS DPA depending on services and support.

Applicable Services. ClearMark cloud platform and supporting AWS services.

AWS downstream subprocessors. AWS may engage its own subprocessors to provide AWS services. The entities that are relevant depend on the AWS Region and services used. AWS maintains its current list at AWS Sub-processors.

No Additional Customer-Data Subprocessors Currently Listed

Based on ClearMark’s currently verified production architecture, no additional third-party provider is listed at this time as a subprocessor of Customer Personal Data. Other vendors may support corporate or business operations; they will be added here if authorized to Process Customer Personal Data for the Services.

Subprocessor Changes and Customer Objections

Notice. ClearMark will provide reasonable advance notice before engaging a new Subprocessor that will Process Customer Personal Data, consistent with the DPA.

Objections. A Customer may object on reasonable data-protection grounds within fifteen (15) days of notice. The parties will work in good faith to resolve the objection; unresolved objections are governed by the DPA.

Data Protection Commitments

ClearMark requires written data-protection obligations appropriate to the Processing and materially consistent with the DPA, and remains responsible for Subprocessors to the extent required by applicable law and the DPA.

Questions

Privacy and subprocessor questions: privacy@clearmark.ai
Security concerns: security@clearmark.ai

Subprocessor List

Turn true insight into real impact. Join us today.