ClickUp

clickup.com · facts updated 2 hours ago

Privacy facts at a glance

Jurisdictions: US · IE · DE · AU · SG
Subprocessors: 63
Retention: Personal data is retained only as long as reasonably required to provide the Services, unless a longer retention period is required or permitted by law.
Transfer mechanism: Standard Contractual Clauses (SCCs) or another Transfer Solution under Article 45 or 46 of the GDPR
DPA available: Yes
Certifications: SOC 2 · ISO 27001 · HIPAA
GDPR addressed: Yes
CCPA addressed: Yes

Named subprocessors

Amazon Web Services Amplitude Anthropic OpenAI Google Firebase, Google Analytics, Google Gemini Snowflake Stripe Twilio Zendesk Salesforce Datadog Segment

Tracked documents

https://clickup.com/terms/privacy checked 2 hours ago

https://clickup.com/terms checked 1 hour ago

Data processing agreement

https://clickup.com/terms/dpa checked 1 hour ago

Subprocessor list

https://clickup.com/terms/dpa/subprocessors checked 1 hour ago

Security / trust page

https://clickup.com/terms/security-policy checked 1 hour ago

Recent changes

Document updated.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track ClickUp in your workspace.

Get notified when ClickUp adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial

No card required.