ActiveCampaign

activecampaign.com · facts updated 3 hours ago

Privacy facts at a glance

Jurisdictions: US · EU · AU · IE · BR · PL · MX · CR
Subprocessors: 8
Retention: The privacy policy includes a section titled 'Retaining Your Information' but the specific retention period is not stated in the provided excerpts.
DPA available: Yes
Certifications: SOC 2 · HIPAA
GDPR addressed: Yes
CCPA addressed: Yes

Named subprocessors

Amazon Web Services CloudFlare Snowflake Zendesk Zight (formerly CloudApp) Twilio Amazon Web Services (AWS Bedrock) OpenAI

Tracked documents

https://www.activecampaign.com/legal/privacy-policy checked 10 hours ago

https://www.activecampaign.com/legal/terms-of-service checked 9 hours ago

Data processing agreement

https://www.activecampaign.com/legal/dpa checked 8 hours ago

Subprocessor list

https://www.activecampaign.com/legal/subprocessors checked 3 hours ago

Security / trust page

https://www.activecampaign.com/security checked 9 hours ago

Recent changes

minor Subprocessor list 3 hours ago

ActiveCampaign's subprocessor list shows no material changes — the additions and removals contain identical subprocessors (AWS, CloudFlare, Snowflake, Zendesk, Zight, Twilio, AWS Bedrock, OpenAI) with the same services and locations, differing only in formatting and whitespace.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track ActiveCampaign in your workspace.

Get notified when ActiveCampaign adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial

No card required.