Resource · Sub-processor changes
Who your AI vendors depend on
1,381 companies named as sub-processors across the published lists of 95 AI vendors, counted by how many of those vendors name each one.
The dependency nobody signed for
Amazon Web Services, Inc. is named by 63 of the 95 vendors whose lists we hold. OpenAI by 45. Buy four AI products and the chance that all four rest on one or two of the same companies is high — and none of your four contracts is with them.
That is what a fourth party is: a company your vendor depends on, disclosed on a page rather than in your agreement, and free to change without anyone telling you.
1,194 of the 1,381 companies are named by exactly one vendor. Concentration is the risk story; the tail is the workload. Anyone assembling a fourth-party register finds that most entries appear once and have to be read one at a time.
Two names we deliberately keep apart
A vendor that named a platform named the platform. Rolling those up into the parent company would publish a naming the vendor did not make, so the counts sit next to each other and you can add them if your question is about the parent.
Named by more than one vendor — top 40 of 187
Find your own vendors in the right-hand column and read across. A company beside three of them is a single point your stack shares three ways.
| Company | Vendors | Named by |
|---|---|---|
| Amazon Web Services, Inc. | 63 | 6sense, Abnormal Security, Adobe, AI21 Labs, Airtable, Algolia, Amazon Web Services, Anthropic, Anyscale, Asana, Atlassian, Baseten, Beamery, BigPanda, and 49 more |
| OpenAI | 45 | 6sense, Ada, Airtable, Algolia, Asana, Atlassian, Beamery, BigPanda, Box, Braintrust, Chroma, Databricks, Datadog, Decagon, and 31 more |
| Twilio Inc. | 41 | 6sense, Abnormal Security, Ada, Adobe, Airtable, Anthropic, Atlassian, Beamery, Cloudera, Databricks, Datadog, Dataminr, Decagon, Eightfold AI, and 27 more |
| Microsoft Corporation | 37 | Abnormal Security, Adobe, Algolia, Anyscale, Atlassian, Beamery, Box, Cloudera, Confluent, Coveo, Databricks, Datadog, Eightfold AI, Freshworks, and 23 more |
| Google LLC | 34 | Airtable, Algolia, Anyscale, Asana, Atlassian, Beamery, Box, ClickHouse, Confluent, Darktrace, Databricks, Datadog, Freshworks, GitLab, and 20 more |
| Anthropic | 32 | Ada, Airtable, Algolia, Asana, Box, Braintrust, Databricks, Datadog, Decagon, ElevenLabs, Encord, Fireflies.ai, GitHub, GitLab, and 18 more |
| Cloudflare | 31 | Adobe, AI21 Labs, Algolia, Anthropic, Asana, Atlassian, Beamery, Braintrust, Freshworks, GitHub, GitLab, Groq, HubSpot, Insider, and 17 more |
| Snowflake Inc. | 28 | Atlassian, BigPanda, Coveo, Datadog, Freshworks, GitLab, Glean, Gong, HighRadius, HireVue, HubSpot, Intercom, Landing AI, Modal, and 14 more |
| Google Cloud Platform | 23 | AI21 Labs, Anthropic, Chroma, ClickHouse, Decagon, ElevenLabs, Fireflies.ai, GitHub, Groq, Harvey, LangChain, Lovable, Lucidworks, Modal, and 9 more |
| Zendesk | 23 | Adobe, Atlassian, Beamery, Box, Confluent, Datadog, ElevenLabs, GitHub, GitLab, Glean, HireVue, Jasper, Lucidworks, Moogsoft, and 9 more |
| Stripe | 22 | AI21 Labs, Anthropic, AssemblyAI, Chroma, Encord, Groq, HubSpot, Jasper, Landing AI, LangChain, LiveKit, Lovable, Mistral AI, MongoDB, and 8 more |
| Datadog, Inc. | 19 | 6sense, Ada, Adobe, Algolia, Beamery, Braintrust, HireVue, Jasper, LiveKit, Lucidworks, Modal, Monday.com, Replit, Scale AI, and 5 more |
| Salesforce, Inc. | 19 | 6sense, Abnormal Security, Atlassian, ClickHouse, Datadog, Eightfold AI, Glean, HighRadius, Landing AI, Langfuse, LiveKit, Lucidworks, PagerDuty, Paradox, and 5 more |
| Slack | 17 | Baseten, Chroma, Confluent, Databricks, ElevenLabs, Encord, Glean, Jasper, LiveKit, Lucidworks, Nebius, Otter.ai, Outreach, Scale AI, and 3 more |
| Intercom, Inc. | 15 | Adobe, AI21 Labs, Anthropic, Asana, Glean, Groq, Landing AI, Mistral AI, OpenAI, Otter.ai, PagerDuty, Phenom, SeekOut, Snyk, and 1 more |
| Atlassian Pty Ltd. | 13 | Abnormal Security, Atlassian, Confluent, Databricks, Dataminr, Eightfold AI, Nebius, Outreach, PagerDuty, Redis, Scale AI, SentinelOne, Smartsheet |
| Mailgun Technologies, Inc. | 13 | Airtable, Atlassian, Datadog, Freshworks, GitLab, Gong, HireVue, Intercom, Monday.com, Notion, PagerDuty, Replit, Zapier |
| Okta, Inc. | 13 | Adobe, Atlassian, Beamery, Cloudera, Dataminr, Lucidworks, MongoDB, OpenAI, PagerDuty, Persado, Redis, Snyk, xAI |
| Databricks, Inc. | 12 | Abnormal Security, Asana, Atlassian, Coveo, Databricks, Dataminr, Freshworks, Outreach, PagerDuty, Qualtrics, Smartsheet, Zapier |
| Microsoft Azure | 11 | Ada, Anthropic, Modal, n8n, New Relic, Outreach, Relevance AI, Replit, SeekOut, Snowflake, Weaviate |
| Sendgrid | 11 | Ada, Adobe, Encord, Freshworks, Glean, Jasper, New Relic, Outreach, Phenom, Zendesk, Zscaler |
| Hubspot | 10 | Dataminr, Encord, Groq, HubSpot, LiveKit, Nebius, Replit, Snyk, Weaviate, xAI |
| MongoDB, Inc. | 10 | Adobe, Atlassian, Gong, MongoDB, Scale AI, Snyk, Weaviate, Workato, xAI, Zendesk |
| Vercel | 10 | Airtable, Braintrust, Chroma, Decagon, Jasper, LiveKit, Notion, PagerDuty, xAI, Zapier |
| WorkOS | 10 | Anthropic, Anyscale, Baseten, Chroma, OpenAI, Otter.ai, Relevance AI, Replit, Spellbook, xAI |
| Baseten | 9 | Ada, Glean, Harvey, LangChain, LiveKit, MongoDB, Notion, Replit, Zendesk |
| ClickHouse, Inc. | 9 | Ada, Decagon, GitLab, Insider, LangChain, Modal, Outreach, Weights & Biases, xAI |
| Pylon | 9 | Ada, Airtable, Anyscale, Baseten, ClickHouse, LangChain, Langfuse, LiveKit, Weaviate |
| Amplitude, Inc. | 8 | Asana, Jasper, Notion, Outreach, PagerDuty, Replit, Smartsheet, Snyk |
| ElevenLabs Inc. | 8 | Ada, Adobe, Decagon, Fireflies.ai, Harvey, HireVue, LiveKit, Zendesk |
| Fivetran | 8 | GitLab, Jasper, New Relic, Notion, OpenAI, PagerDuty, Replit, Scale AI |
| Functional Software, Inc. (Sentry) | 8 | Anthropic, Mistral AI, Monday.com, Nebius, Scale AI, Snyk, Zendesk, Zscaler |
| Google Cloud | 8 | Ada, Baseten, Braintrust, HireVue, Jasper, Notion, Relevance AI, xAI |
| Sentry | 8 | Ada, Braintrust, Encord, Relevance AI, Replit, Snyk, xAI, Zapier |
| Google Workspace | 7 | Fireflies.ai, Jasper, Lucidworks, Redis, Snyk, Vespa, Weaviate |
| Hyperdoc Inc. | 7 | Asana, Datadog, Eightfold AI, HubSpot, Monday.com, PagerDuty, Phenom |
| Pendo.io, Inc. | 7 | Beamery, Dataminr, Eightfold AI, HighRadius, HireVue, Moogsoft, PagerDuty |
| AWS | 6 | ClickHouse, ElevenLabs, New Relic, Notion, Weights & Biases, xAI |
| Deepgram | 6 | Ada, Glean, HighRadius, LiveKit, Phenom, Zendesk |
| Modal | 6 | Chroma, Decagon, Glean, LiveKit, Weaviate, Weights & Biases |
What to do with it
Put each shared company into your register once, with every vendor that reaches it. Then check what those vendors owe you when it changes — a sub-processor addition is the event most agreements actually cover, and the window to object usually runs from the vendor’s notice rather than from the day you read it.
Take it with you
The same table as a Word document. It is generated when you download it, so it carries the record as it stands that day.
How these were counted
Every name was read from a sub-processor list the vendor publishes. Names are grouped on a normalized form, so “Amazon Web Services” and “Amazon Web Services, Inc.” count once; the spelling shown is the one most of the vendors naming it used.
Nothing is inferred about a relationship a vendor did not disclose, and a company absent from a vendor’s list is absent from that vendor’s row — which says what the page says, not what is true. How the record is kept.
Common questions
- What is a fourth party?
- A company your vendor depends on. You have no contract with it, it is disclosed on a page rather than in your agreement, and it can change without anyone telling you. Your vendor calls it a sub-processor.
- Which cloud do most AI vendors run on?
- Of the 84 AI vendors whose sub-processor lists we hold, more name Amazon Web Services than any other company. The full count and the vendors naming it are on this page, read from each vendor's own published list.
- How do I build a fourth-party register?
- Start from your own vendors' published sub-processor lists, then deduplicate across them — which is what this page does for the 95 vendors we watch. Expect a long tail: most companies here are named by exactly one vendor.
- Why are Google and Google Cloud Platform counted separately?
- Because vendors named them separately. A vendor that named the platform named the platform, and rolling it up into the parent would publish a naming it did not make. The two counts are printed next to each other so you can add them if your question is about the parent.
- Does a vendor have to tell me when it adds a sub-processor?
- It depends on your agreement. Most data processing agreements cover sub-processor additions and give a window to object, and that window usually runs from the vendor's notice rather than from the day you read it.
Sub-processor changes
Find out when a vendor's list moves, and decide what to do.
- What changed in AI vendor disclosures
Sub-processor lists and DPAs that differ from the copy we held before.
- Sub-processor register template
Ten columns in the shape a reviewer asks for — with the share of each one your vendors actually publish, counted across 3,433 entries.
This is not legal advice. The lists quoted are published documents read on the dates shown in each vendor’s record; your negotiated contract governs over anything here. Naming a company as a sub-processor is a disclosure the vendor made, not a partnership with Xither. The record is free to read, and corrections are free to request.