What we could verify

AWS appears in many companies’ infrastructure disclosures. Its own selected supplier relationships are narrower: applicability depends on the particular AWS service, region and customer choices.

A company’s use of AWS does not establish that it also uses every supplier in AWS’s list. Domain registration and messaging have specific scopes; downstream routes are not inferred from them.

2 reviewed outbound connections are available in this research. 122 reviewed connections point to this exact company record. This is selected coverage, not a complete recipient list.

Explore Amazon Web Services in the map

Who it works with

Connections from Amazon Web Services, with the purpose and scope attached to each source. A connection documents a relationship; it does not show that your data was transferred.

Processes data on behalf of another company

Key-Systems GmbH

Amazon Web Services → Key-Systems GmbH

Domain registration

Applies to: Amazon Route 53.

When this applies

  • Only Amazon Route 53; source labels country as service-provider location and processing may also involve region/end-user location.
Data, location and review details
Data categories
Not specified for this connection in the reviewed record. Do not assume all customer data.
Locations
Germany (location type not established)
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
Section 3 — Amazon Route 53 row
Source retrieved
Claim independently reviewed

Source: AWS Sub-processors · Reviewed

Processes data on behalf of another company

Twilio, Inc.

Amazon Web Services → Twilio, Inc.

Application-to-person messaging

Applies to: AWS End User Messaging and Amazon SNS.

When this applies

  • Only named messaging services; processing may occur in chosen AWS region, provider locations or end-user location.
  • Messaging providers may use downstream routing providers; no inferred downstream edges created.

What remains unclear

  • Grouped locations cannot reliably be assigned to each provider from parsed table; locations left empty.
Data, location and review details
Data categories
Not specified for this connection in the reviewed record. Do not assume all customer data.
Locations
No specific processing location established for this connection.
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
Section 3 — messaging providers row
Source retrieved
Claim independently reviewed

Source: AWS Sub-processors · Reviewed

Who names Amazon Web Services

These disclosures belong to the companies named below. They do not establish which of Amazon Web Services’s own suppliers are involved further on.

Processes data on behalf of another company

Dropbox

Dropbox → Amazon Web Services, Inc.

Tasks on Dropbox’s behalf to provide, improve, protect or promote its services; individual company role not specified

Applies to: Dropbox personal accounts — general privacy disclosure.

When this applies

  • The FAQ applies to all Dropbox users and presents a shared list of trusted third parties across Dropbox services.
  • The source does not identify which personal plan, feature or individual activity uses this company.
  • A selected name in this general disclosure does not establish that every user’s files or other data reach that company.

What remains unclear

  • No per-company data categories, processing country or specific task are provided by this list.
  • Exact disclosed legal label retained; no corporate or product equivalence is assumed.
Data, location and review details
Data categories
Personal information
Locations
No specific processing location established for this connection.
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
Section 5, trusted third parties list and preceding on-behalf paragraph
Source retrieved
Document updated
Claim independently reviewed
· Agent review

Source: Dropbox Privacy Policy FAQ — trusted third parties · Reviewed

Processes data on behalf of another company

Microsoft

Microsoft → Amazon Web Services

Microsoft Purview connectors that scan across clouds

Applies to: Microsoft Purview multi-cloud scanning connectors for AWS.

When this applies

  • The applicable product column names Microsoft Purview, specifically its multi-cloud scanning connectors.
  • Processing location depends on the location of the customer's AWS storage account.

What remains unclear

  • The row also mentions acquired services hosted on AWS before migration to Azure, without naming the acquisitions; this assertion extracts only the explicitly named Purview use.
  • The source label names Amazon Web Services without a legal suffix; this is not an ownership or legal-entity resolution.
Data, location and review details
Data categories
Customer Data; Personal Data consisting of pseudonymized personal identifiers
Locations
Location of the customer's AWS storage account (processing location)
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
Page 4, section 2, Amazon Web Services row and ancillary-services introduction
Source retrieved
Document updated
Claim independently reviewed
· Agent review

Source: Microsoft Online Services Subprocessors, September 10, 2026 · Reviewed

Processes data on behalf of another company

OpenAI

OpenAI → Amazon Web Services, Inc.

Cloud infrastructure

Applies to: ChatGPT Business; ChatGPT Enterprise; ChatGPT Edu.

When this applies

  • The row explicitly names ChatGPT Business, Enterprise and Edu.

What remains unclear

  • The table does not distinguish Standard/Premium Business seats; no seat-specific routing is established.
Data, location and review details
Data categories
Not specified for this connection in the reviewed record. Do not assume all customer data.
Locations
United States (processing location)
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
Third Party Sub-processors > Amazon Web Services, Inc. row
Source retrieved
Document updated
Claim independently reviewed
· Agent review

Source: OpenAI Sub-processor list · Reviewed

Processes data on behalf of another company

15Five

15Five → Amazon Web Services, Inc.

Cloud hosting and critical infrastructure

Applies to: 15Five platform, Perform and Engage products.

No additional condition is recorded for this selected claim. Its stated product scope still applies.

What remains unclear

  • USA is Entity Country; no processing geography inferred.
Data, location and review details
Data categories
Not specified for this connection in the reviewed record. Do not assume all customer data.
Locations
No specific processing location established for this connection.
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
Platform table — AWS row
Source retrieved
Effective date
Claim independently reviewed

Source: 15Five Platform Sub-processors · Reviewed

Processes data on behalf of another company

ActiveCampaign

ActiveCampaign → Amazon Web Services

Data storage.

Applies to: ActiveCampaign Services.

No additional condition is recorded for this selected claim. Its stated product scope still applies.

Data, location and review details
Data categories
Not specified for this connection in the reviewed record. Do not assume all customer data.
Locations
United States (location type not established); European Union (location type not established); Australia (location type not established)
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
Infrastructure Sub-processors, AWS row
Source retrieved
Effective date
Claim independently reviewed

Source: List of Sub-processors · Reviewed

Processes data on behalf of another company

Adobe

Adobe → Amazon Web Services, Inc.

Cloud application hosting

Applies to: Adobe Creative Cloud under customer cloud agreement; Adobe Document Cloud under customer cloud agreement.

When this applies

  • Some products allow a primary hosting location to be selected, subject to availability.
Data, location and review details
Data categories
Not specified for this connection in the reviewed record. Do not assume all customer data.
Locations
USA (location type not established); EU (location type not established); Australia (location type not established); Singapore (location type not established); Japan (location type not established); India (location type not established)
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
Cloud services table — Amazon Web Services, Inc.
Source retrieved
Claim independently reviewed

Source: Adobe Cloud Services Sub-Processors · Reviewed

Processes data on behalf of another company

Adyen

Adyen → Amazon Web Services, Inc.

Supplemental cloud infrastructure, storage, compute and networking

Applies to: Adyen merchant services in processor capacity where applicable agreement specifies.

When this applies

  • Authorized effective September1 2026; specific customer deployment not enumerated

What remains unclear

  • No processing regions or service-specific routing supplied.
Data, location and review details
Data categories
Not specified for this connection in the reviewed record. Do not assume all customer data.
Locations
No specific processing location established for this connection.
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
AWS / Processing Services L86–90
Source retrieved
Effective date
Claim independently reviewed

Source: List of Adyen sub-processors · Reviewed

Processes data on behalf of another company

Aircall

Aircall → AMAZON WEB SERVICES, INC.

Hosting Aircall product data

Applies to: Aircall contracted business phone and communications services.

When this applies

  • Primarily US hosting; EU/Australia regional storage only for selected data types
Data, location and review details
Data categories
Not specified for this connection in the reviewed record. Do not assume all customer data.
Locations
USA (processing location); Germany (processing location); Australia (processing location)
Jurisdiction
No narrower jurisdiction recorded for this claim.
Where in the source
Infrastructure / Amazon row L198
Source retrieved
Effective date
Claim independently reviewed

Source: Subprocessor List · Reviewed

Sources behind this explanation

Retrieval records when a source was opened. Review records when a particular claim was independently checked. Neither date guarantees that a source has stayed unchanged.