Monitor Clerk compliance pages

Developer-first authentication platform — prebuilt UI components, social login, MFA, user management, and B2B organizations for React/Next.js stacks.

Clerk publishes several compliance and legal pages that change over time. Under GDPR Article 28, data controllers using Clerk as a processor must continuously verify that "sufficient guarantees" remain in place — which means tracking changes to these pages as they happen. Below are the 4 most relevant pages, what typically changes on each, and ready-to-paste monitoring prompts.

Monitor all 4 pages automatically

Choose the pages that matter most and get an alert when something meaningful changes. The free plan covers 3 monitors.

Start with 3 free monitors →

Pages to monitor

Sub-processor list

https://clerk.com/legal/subprocessors ↗

Typical change frequency: quarterly

What to monitor

  • Infrastructure sub-processors (AWS primary)
  • SMS and email delivery partners for verification codes
  • Social provider OAuth proxy sub-processors
  • Analytics and support third parties

Suggested monitoring prompt

Alert me when Clerk updates sub-processors, especially SMS/email delivery and OAuth infrastructure. Report name and purpose.

Data Processing Agreement

https://clerk.com/legal/dpa ↗

Typical change frequency: yearly

What to monitor

  • Changes to EU data hosting options
  • Updates to session token retention
  • Modifications to security measures
  • Transfer mechanism changes (Clerk is US-based)

Suggested monitoring prompt

Monitor the Clerk DPA for changes to EU hosting, session retention, security measures, or transfer mechanisms.

Privacy policy

https://clerk.com/legal/privacy ↗

Typical change frequency: yearly

What to monitor

  • Changes to user data collected from customer applications
  • Updates to social login data handling
  • New analytics on authentication flows
  • Changes to MFA factor storage

Suggested monitoring prompt

Alert me when Clerk changes user data collection, social login data, or MFA storage practices. Ignore editorial changes.

Status page

https://status.clerk.com/ ↗

Typical change frequency: weekly

What to monitor

  • Authentication endpoint availability
  • JWT signing and verification outages
  • Frontend API (component) delivery issues
  • Webhook delivery problems

Suggested monitoring prompt

Alert me on Clerk incidents affecting authentication, JWT handling, frontend API, or webhooks. Ignore minor UI issues.

Compliance certifications

SOC 2 Type IIHIPAA (Enterprise)GDPR

Data location

Hosting locations: United States (AWS), European Union (opt-in)

EU-US Data Privacy Framework: Certified

Related

Ready to start monitoring Clerk?

Set up monitoring free →