StackLégal

Measurement and observability

GDPR Datadog

In an indie stack, Datadog is used for Observability and logs. Entity cited: Datadog, Inc.. The sections repeat what the vendor publishes, without filling a gap. Last update of the facts: October 4, 2026. Verified on October 4, 2026.

Translation of the French sheet. The facts do not change. The date is the date the official pages were read.

DPA Datadog

Yes. Public Data Processing Addendum. The GDPR page also states that a customer can request signature at privacy@datadoghq.com.

Read the DPA

Stated role

Datadog is processor of Customer Personal Data. The DPA states that the services are generally not intended for personal data, and that the customer must not submit special-category data.

Personal data

Personal data sent to Datadog by the customer or on the customer's behalf. Data subjects may include the customer's employees, customers, suppliers, and end users.

Sub-processors of Datadog

Public list.

List published by the vendor

Transfers outside the EU

Hosting / location

The DPA does not set a single region. Infrastructure sub-processors cite Amazon Web Services in the United States, Australia, Italy, Japan, and the United Kingdom; Google LLC in the United States and in Germany; Microsoft Azure in the United States, plus Datadog affiliates in other countries.

EU–United States Data Privacy Framework

Datadog, Inc. is registered. EU-U.S. Data Privacy Framework status: Active.

Data Privacy Framework sheet

Cookies

The Cookie Policy (stated update: 15 September 2023) describes essential, analytics, and advertising cookies on Datadog sites, without publishing their names. The RUM Browser SDK documentation names the cookies set on the customer's domain: _dd_s_v2 (session; _dd_s before v7), dd_site_test_*, and dd_cookie_test_*. Names of cookies on Datadog sites: not disclosed.

Typical use, written by StackLégal and not by the vendor: Observability and logs.

History

Last update: October 4, 2026.

  1. Cookies: Cookie Policy and documentation, in place of "not disclosed".

  2. First publication. The facts come from the official pages cited in the sources. Anything not stated there remains "not disclosed".

Clause to paste

Place it in the sub-processor section of your privacy policy. Review it: a “not disclosed” field must be completed before publication.

Sub-processor clause

Add this vendor to your free sub-processors widget

Sources

Verified on October 4, 2026.

Frequently asked questions

Is Datadog a processor within the meaning of the GDPR?

Datadog is processor of Customer Personal Data. The DPA states that the services are generally not intended for personal data, and that the customer must not submit special-category data.

What DPA does Datadog publish?

Yes. Public Data Processing Addendum. The GDPR page also states that a customer can request signature at privacy@datadoghq.com. https://www.datadoghq.com/legal/data-processing-addendum/

Which further sub-processors does Datadog publish?

Public list. https://www.datadoghq.com/legal/subprocessors/

Where does Datadog state that it processes data, including outside the EU?

The DPA does not set a single region. Infrastructure sub-processors cite Amazon Web Services in the United States, Australia, Italy, Japan, and the United Kingdom; Google LLC in the United States and in Germany; Microsoft Azure in the United States, plus Datadog affiliates in other countries.

Is Datadog registered under the EU–United States Data Privacy Framework?

Datadog, Inc. is registered. EU-U.S. Data Privacy Framework status: Active. https://www.dataprivacyframework.gov/participant/4595

Which personal data does Datadog mention?

Personal data sent to Datadog by the customer or on the customer's behalf. Data subjects may include the customer's employees, customers, suppliers, and end users.

Often in the same stack

These sheets come up in searches for a Next.js SaaS. Next.js itself is not a processor: GDPR Next.js.

Related tools

All the sheets measurement and observability

Full pack, from 39 € incl. VAT

The clause above covers only one tool. StackLégal generates the legal notices, terms of use, terms of sale, privacy policy, Article 28 DPA, and the public list, naming only the boxes that are checked. One-time payment via Gumroad. This is not legal advice.