Amplitude

amplitude.com · facts updated 1 week ago

Privacy facts at a glance
Jurisdictions
US · EU · DE
Subprocessors
7
Retention
Amplitude offers event retention controls via 'Time to Live' functionality to control how long event data lives in a customer's Amplitude instance, but no specific retention period in days is stated.
Transfer mechanism
SCCs (2021 Standard Contractual Clauses) and EU-U.S. Data Privacy Framework (including UK Extension and Swiss-U.S. extension)
DPA available
Yes
GDPR addressed
Yes
CCPA addressed
Yes
Named subprocessors
Amazon Web Services Datadog, Inc. Google, LLC OpenAI, LLC Snowflake Computing, Inc. Wiz, Inc. Fivetran Inc.

Tracked documents

Privacy policy
https://amplitude.com/privacy/archive/2025-12 checked 8 hours ago
Terms of service
https://amplitude.com/terms checked 8 hours ago
Data processing agreement
https://amplitude.com/dpa checked 8 hours ago
Subprocessor list
https://amplitude.com/subprocessor-list checked 2 hours ago
Security / trust page
https://amplitude.com/security-and-privacy checked 9 hours ago

Recent changes

Data processing agreement 1 week ago

Document updated.

Data processing agreement 1 week ago

Document updated.

Subprocessor list 2 weeks ago

Document updated.

Data processing agreement 2 weeks ago

Document updated.

Privacy policy 2 weeks ago

Document updated.

Terms of service 2 weeks ago

Document updated.

Security / trust page 2 weeks ago

Document updated.

moderate Security / trust page 1 month ago

Amplitude replaced a placeholder section about AI feature engagement visibility (which noted features were still in development) with a new section describing guardrails for agentic AI features, including human approval requirements, administrator audit capabilities, and confirmation that existing permissions and data access controls apply to all agent actions.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Amplitude in your workspace.

Get notified when Amplitude adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial
No card required.