Subprocessors

Subprocessors and Data Hosting Locations

Tradeshift uses its global entities, as well as third party subprocessors, to assist with the provision of our services.  Tradeshift cloud solutions utilize various data hosting locations around the world.  This document provides information about subprocessors and the regional data storage locations we use for the SaaS services we offer.

 

What is a Subprocessor?

A subprocessor is a third party engaged by Tradeshift, which has or potentially will have access to, or process personal data of our customers, who are the data controllers of that personal data. Tradeshift uses subprocessors, including Tradeshift global affiliates, to perform various functions detailed below.  Whether a specific subprocessor processes a specific customer’s data will depend on the products to which the customer is subscribed, the country in which the customer is located (or receives or sends documents from) and other factors.

 

Due Diligence

Tradeshift uses a selection process, which includes rigorous evaluation of the security practices of each subprocessors that may have access to or process Personal Data, and requires each subprocessor to adhere to requirements of data protection law equivalent to those required from Tradeshift (as a Data Processor to our customers).

 

Tradeshift Authorized Third Party Subprocessors

Tradeshift processes users’ names and their business email addresses for the purposes of sending and receiving business documents. The companies listed below are third parties, not affiliated with Tradeshift, that Tradeshift contracts with to store, access or otherwise process customer data (including personal data) as part of the Tradeshift SaaS services. Tradeshift may also notify or obtain consent to the use of specific subprocessors not listed below in direct agreement with customers.

 

TRADESHIFT PLATFORM AND TRADESHIFT SAAS CORE SERVICES

NameService TypeData ProcessedProcessing LocationsAdditional Information
Amazon Web Services EMEA SARL
Amazon Web Services, Inc.
Cloud Service providerAll types of data stored by Tradeshift platform and SaaS ServicesIreland, US (Only for US customers using Tradeshift Link)AWS Security Center
Mailgun Technologies, Inc.620 Folsom St Ste 100. San Francisco , CA94107-3625Product notification email providerUser names and email addressesUnited StatesPrivacy policy
Splunk, Inc.270 Brannan Street,
San Francisco, CA 94107
System LoggingAudit LogsUnited StatesPrivacy policy
Zendesk, Inc.989 Market StreetSan Francisco, CA 94103Support SystemCustomer support contact names, email addresses and communications contentFrankfurtPrivacy policy
Pendo.io
301 Hillsborough Street
Raleigh, NC
27603
Product experience platformUser names and identifiers, device information, usage activity informationUnited StatesPrivacy policy
Datadog, Inc.
620 8th Avenue
45th Floor
New York, NY
10018-1741
Cloud-based monitoring and analyticsUser names and identifiers, IP Addresses, device information, activity logs and performance dataUnited StatesPrivacy policy

 

REGIONAL ELECTRONIC INVOICING

Subprocessors involved with electronic invoice signatures, archiving, and tax clearance. Use of these depends on whether customer is a buyer or seller and country in which invoice is issued or into which an invoice is sent.  More information can be found here.

NameService TypeData ProcessedProcessing LocationsAdditional Information
Sovos (Trustweaver AB)
Org no 556613 6262 Kungsgatan 27 SE-111 56 Stockholm, Sweden
Tax compliance and e-invoicingInvoices and transactional data for tax calculation, reporting, and compliance purposesSwedenPrivacy policy
Avalara Europe Limited
Lanchester House, 1st Floor, Trafalgar Place, Brighton, BN1 4FU, United Kingdom
Tax compliance and e-invoicing
Tax compliance and e-invoicingInvoices and transactional data for tax calculation, reporting, and compliance purposesUnited StatesPrivacy policy
Kingxunlian
Floor 12/16, Building No. 9, Yulang West Park, Xicheng District, Beijing
Tax compliance and e-invoicingInvoices and transactional data for tax calculation, reporting, and compliance purposesChinaPrivacy policy

 

Other Subprocessors

NameService TypeData ProcessedProcessing LocationsAdditional Information
Canon Business Process Services, Inc.
261 Madison Avenue, 3rd Floor
New York, New York 10016
Invoice ScanningInvoice and Credit Memo documents2 processing centers in the United States and 2 in the Philippines.Privacy policy
Canon Europe Ltd
3 The Square, Hayes
Uxbridge UB11 1ET
United Kingdom
Invoice ScanningInvoice and Credit Memo documents2 processing centers in France, 1 in the Czech Republic, and 1 in the Philippines.Privacy policy
Conduent Business Services, LLC
100 Campus Drive, Suite 200
Florham Park, New Jersey 07932
Invoice scanning services; Seller integration servicesInvoice and credit memo documents; Platform account administration dataUSA, IndiaPrivacy policy
Google
1600 Amphitheatre Pkwy
Mountain View, CA 94043
Corporate email communication;
Page usage analytics in product;
Customer contact email and other data exchanged with teams for set-up and implementation projects; Analytics services;
IP address/Cookie – Customer users can opt-out of cookies to avoid the Google Analytics based processing;
USAPrivacy policy
Marketo, an Adobe company
901 Mariners Island Blvd #500
San Mateo, CA, US
Email communication systemUser email addresses for product notificationsUSAPrivacy policy
Salesforce
Salesforce Tower
415 Mission Street, 3rd Floor
San Francisco, CA 94108
CRM SaaS Services and Middleware (Mulesoft)Some seller-related onboarding data is processed using the Salesforce service – which may include a business contact information for individuals. Transaction data is not processed on this service.Germany, FrancePrivacy policy
Fexle
612, Okay Plus, Sector-7, Madhyam Marg
Mansarovar, Jaipur, Rajasthan 302020
India
CRM and email systems Consulting ServicesSome seller-related onboarding data is processed using the CRM and email services for which Fexle provides administration and expert use services  – this may include a business contact information for individuals. Transaction data is not processed on these services.IndiaPrivacy policy
IT Goals
Namaa Building 5th floor, Emtedad Ramses 6th District
Nasr City, Cairo, Egypt
Support for Tradeshift Babelway servicesDocuments in need of support during processing via Babelway / Tradeshift Link integrationsEgypt

 

Subprocessors related to the IBX products

NameService TypeData ProcessedProcessing LocationsAdditional Information
Hiranyagarbha Consultancy
#76, 2nd Cross, Venkateshwara Nagar, Sampigehalli, Yelahanka Hobli
Bengaluru 560064 India
Professional Services and Software development SAP SRMCustomer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, locationIndiaPrivacy policy
Tradeshift Global Entities (see below)Professional services, Software development, Service Desk support, Software SupportThe Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, locationRomania, Sweden, Malaysia
Amazon Web Services
EMEA SARL Amazon Web Services, Inc.
Infrastructure hostingThe Customer’s employees and their associated data, such as names, contact details, employee number, organizational affiliation, locationSwedenPrivacy policy
AWS Security Center https://aws.amazon.com/security/

 

Tradeshift Global Entities

Tradeshift operates various global corporate entities. As part of providing our services and support, your personal information may be processed by any one of these entities:

Tradeshift Corporate Affiliate Country
Tradeshift Holdings, Inc.United States
Tradeshift Inc.United States
Tradeshift FG LLCUnited States
Tradeshift SABelgium
Tradeshift Belgium SA (formerly Babelway SA)Belgium
Tradeshift AB (formerly IBX Group AB)Sweden
Tradeshift ApSDenmark
Tradeshift SASFrance
Tradeshift Japan, Inc.Japan
Tradeshift Network Ltd.United Kingdom
Tradeshift Pty LtdAustralia
Tradeshift QFZ LLC d/b/a Tradeshift QFZQatar
Tradeshift Sdn.BhdMalaysia
Tradeshift Technology SRLRomania
Tradeshift Asia Holdings LtdPeople’s Republic of China (Hong Kong)
Tradeshift China LtdPeople’s Republic of China (Shanghai)

 

Optional Integrations

There are other third parties we partner with to offer optional integrations with our products. These third parties are engaged directly by you. No information is shared with any of these entities unless you choose to enable any of their integrations. The privacy policies applicable to these integrated services varies. Tradeshift is not responsible for the content of the privacy policies of the third parties who offer integrations. You can enable or disable these integrations in your account at any time.

 

Receiving Updates about Subprocessors

As the services we offer grow and evolve, the Subprocessors we utilize may also change. We will endeavor to provide prompt updates through this page, and product release announcements, as applicable, as new Subprocessors are added or existing ones are removed.

To add your email address to our Subprocessor notification list, please provide your name, business email address and the name of the Tradeshift customer that you represent here ⇒  ADD ME TO UPDATE LIST

Only existing Tradeshift customers are entitled to this information, so please list accurate customer name.  This information will be stored solely to provide these updates and according to the Tradeshift Web Site Privacy Policy:

 

Where your data is stored by Tradeshift

Tradeshift ProductIrelandBelgiumSwedenUS
Tradeshift Platform
Tradeshift Pay
Tradeshift Buy
Tradeshift Go
Tradeshift Cash
Tradeshift Babelway
IBX

 

Notes:
  • Tradeshift Subprocessors may utilize additional locations as specified in the list above
  • US storage of data for Babelway is only for US based customers
  • Tradeshift SaaS Software operated in China is not addressed in this document
  • Third Party SaaS Products and Apps which are distributed by Tradeshift may use other hosting locations as specified in the subscription agreement for that service

 

LOG OF UPDATES TO THIS PAGE:

03-03-2026 Periodic review completed: removed inactive vendors and added Avalara Europe Limited as a data subprocessor.

10-28-2021  We re-organized the page to provide more consistent information about each Subprocessor including data processing location, added the option for a person to receive subprocessor updates, removed entities that are service providers to Tradeshift as a controller of personal data but are not a subprocessor with regard to the Tradeshift SaaS Products, and directly added the list of e-invoicing service providers.  We also added subprocessors regarding the Tradeshift Babelway services which had been on a separate list. Some subprocessors were added as they are commonly used and best disclosed on this page rather than just in agreements with our customers.

 

Last Updated: 03-03-2026