Please see the below list of sub-processors that Hotjar has engaged with, the country they operate from, and the service(s) they provide.
| Sub-Processor | Country | Service | Sub-Processor Measures |
| Amazon Web Services | Ireland | Cloud Service Provider | Shared Responsibility Model |
| Datadog | Germany | Real-time alerts and monitoring service | Security, Data Protection, and Compliance practices |
| Sentry | USA | Application monitoring and error tracking | Security and Compliance commitments |
| Altinity | USA | ClickHouse Data Warehouse | Security and Governance commitments |
| OpenAI | USA | AI Provider (optional, only if you choose to use AI powered features) | Security & Privacy commitments |
| Affiliate Sub-Processor | Country | Service | Sub-Processor Measures |
| Hotjar Germany GmbH | Germany | Hotjar affiliate | Data Safety, Privacy & Security |
| Hotjar Web Services Spain, S.L. | Spain | Operational support | Data Safety, Privacy & Security |
| Hotjar UK Limited | UK | Operational support | Data Safety, Privacy & Security |
| Hotjar Netherlands BV | Netherlands | Operational support | Data Safety, Privacy & Security |
| Hotjar Web Portugal, Unipessoal LDA | Portugal | Operational support | Data Safety, Privacy & Security |
| Engage Product specific Sub-Processor | Country | Service | Sub-Processor Measures |
| Microsoft Azure | Ireland | Cloud Service Provider | Privacy in Azure |
| Twilio Inc. | Ireland | Video hosting provider | Security and Compliance commitments |
| Postmark | USA | Email delivery service | Security and Compliance commitments |
Hotjar is committed to ensuring that all of its sub-processors have the appropriate legal and security safeguards in place to ensure that your data will remain protected to the highest standards. This includes signing a Data Processing Agreement (together with Standard Contractual Clauses, where applicable) with all of our sub-processors and ensuring they all have supplementary measures in place, where applicable.
Should Hotjar need to designate further sub-processors or make any change to the existing sub-processors, Hotjar will inform its customers and give customers ten (10) business days from giving notice to reasonably object to these changes.