Please see the below list of sub-processors that Hotjar has engaged with, the country they operate from, and the service(s) they provide.
| Sub-Processor | Country | Service | Sub-Processor Measures |
| Amazon Web Services | Ireland | Cloud Service Provider | Shared Responsibility Model |
| Datadog | Germany | Real-time alerts and monitoring service | Security, Data Protection, and Compliance practices |
| Sentry | USA | Application monitoring and error tracking | Security and Compliance commitments |
| Altinity | USA | ClickHouse Data Warehouse | Security and Governance commitments |
| Microsoft, Azure OpenAI Service | USA | Large Language Model (LLM) provider (optional only if you choose to use AI-powered features) | Data Safety, Privacy & Security |
| Affiliate Sub-Processor | Country | Service | Sub-Processor Measures |
| Hotjar Germany GmbH | Germany | Hotjar affiliate | Data Safety, Privacy & Security |
| Hotjar Web Services Spain, S.L. | Spain | Operational support | Data Safety, Privacy & Security |
| Hotjar UK Limited | UK | Operational support | Data Safety, Privacy & Security |
| Hotjar Netherlands BV | Netherlands | Operational support | Data Safety, Privacy & Security |
| Hotjar Web Portugal, Unipessoal LDA | Portugal | Operational support | Data Safety, Privacy & Security |
| Content Square SAS | France | Consulting, Support, Maintenance, Implementation, and Development | Data Safety, Privacy & Security |
| Heap Inc. | USA | Consulting, Support, Maintenance, Implementation, and Development | Data Safety, Privacy & Security |
| Engage Product specific Sub-Processor | Country | Service | Sub-Processor Measures |
| Twilio Inc. | Ireland | Video hosting provider | Security and Compliance commitments |
| Postmark | USA | Email delivery service | Security and Compliance commitments |
Hotjar is committed to ensuring that all of its sub-processors have the appropriate legal and security safeguards in place to ensure that your data will remain protected to the highest standards. This includes signing a Data Processing Agreement (together with Standard Contractual Clauses, where applicable) with all of our sub-processors and ensuring they all have supplementary measures in place, where applicable.
Should Hotjar need to designate further sub-processors or make any change to the existing sub-processors, Hotjar will inform its customers and give customers ten (10) business days from giving notice to reasonably object to these changes.