Xither
Sign inTry Pro free

Where vendors publish

Where does your AI vendor publish its sub-processor list?

That’s the list of companies your vendor hands your data to. There’s no standard address for it, or for the data processing agreement (DPA). Here’s every address we’ve found, and the vendors we haven’t found one for yet.

Four vendors, four different places.

Each vendor picks its own address. Some put it on a separate subdomain.

  • OpenAI

    trust.openai.com

    In a trust center.

  • Adobe

    adobe.com/privacy/sub-processors.html

    A page under privacy.

  • HubSpot

    legal.hubspot.com

    On a legal subdomain.

  • Salesforce

    compliance.salesforce.com

    Inside a compliance portal.

213

pages we can read, across 168 vendors.

65

vendors publish both documents where we can read them.

1

refused our reader. Their pages exist, and a person with a browser can open them.

Find your vendor.

Both documents, readable

65 vendors

We can read the sub-processor list and the DPA.

One of the two

76 vendors

We can read one document. The other row says what happened when we tried.

Neither, so far

27 vendors

We can't read either document yet. Each row says why, and none of them means the vendor publishes nothing.

  • 6sense

    • Data processing agreement answered HTTP 429 · 6sense.com/legal/dpa
    • Sub-processor list answered, but the page was not found · 6sense.com/legal/subprocessors

  • AI21 Labs

    • Sub-processor list answered with too little text to read · trust.ai21.com/subprocessors

  • Appian

    • Sub-processor list its robots.txt asks automated readers not to fetch it, so we do not read it · assets.appian.com/uploads/sub-process-notice.pdf

  • Arize AI

    • Sub-processor list shown only to visitors the vendor approves · trust.arize.com/subprocessors

  • Augment Code

    • Sub-processor list the vendor's page says to contact it for the list · augmentcode.com/privacy-policy#subprocessors

  • Camunda

    • Sub-processor list filed with the documents the vendor shares under an NDA, and marked not public · trust.camunda.com/

  • Check Point

    • Data processing agreement answered, but the page was not found · checkpoint.com/legal/dpa
    • Sub-processor list our latest reading found 1 name where an earlier one found 69, so a person is checking it · checkpoint.com/legal/sub-processors

  • Cloudera

    • Sub-processor list its robots.txt asks automated readers not to fetch it, so we do not read it · cloudera.com/legal/subprocessors

  • Comet

    • Data processing agreement answered HTTP 429 · comet.com/legal/dpa
    • Data processing agreement answered, but the page was not found · comet.com/dpa
    • Sub-processor list answered HTTP 429 · comet.com/legal/subprocessors
    • Sub-processor list answered HTTP 429 · comet.com/trust/subprocessors

  • Copy.ai

    • Sub-processor list shown only to visitors the vendor approves · trust.copy.ai/subprocessors

  • CoreWeave

    • Sub-processor list our latest reading found 2 names where an earlier one found 3, so a person is checking it · docs.coreweave.com/policies/terms-of-service/sub-processors

  • CrowdStrike

    • Data processing agreement its robots.txt asks automated readers not to fetch it, so we do not read it · assets.crowdstrike.com/is/content/crowdstrikeinc/crowdstrike-global-data-protection-agreementpdf

  • Cyera

    • Sub-processor list shown only to visitors the vendor approves · cyera.io/legal/subprocessors

  • Decagon

    • Sub-processor list answered HTTP 429 · trust.decagon.ai/subprocessors

  • Deep Instinct

    • Sub-processor list the page we found was not that document · www.deepinstinct.com/sub-contractors

  • Gretel.ai

    • Data processing agreement the page we found was not that document · www.nvidia.com/en-us/networking/products/data-processing-unit/

  • IBM

    • Data processing agreement answered HTTP 429 · ibm.com/dpa

  • Luminance

    • Sub-processor list answered with too little text to read · trust.luminance.com/subprocessors

  • Nuance

    • Data processing agreement the page we found was not that document · nuance.com/legal/dpa
    • Sub-processor list the page we found was not that document · nuance.com/legal/subprocessors

  • Numerai

    • Data processing agreement answered, but the page was not found · numer.ai/legal/dpa
    • Sub-processor list answered, but the page was not found · numer.ai/legal/subprocessors

  • Palantir

    • Data processing agreement answered HTTP 429 · palantir.com/legal/dpa
    • Sub-processor list answered HTTP 429 · palantir.com/legal/subprocessors

  • Retell AI

    • Sub-processor list answered HTTP 429 · trust.retellai.com/subprocessors

  • SAS

    • Data processing agreement its robots.txt asks automated readers not to fetch it, so we do not read it · sas.com/dpa
    • Sub-processor list its robots.txt asks automated readers not to fetch it, so we do not read it · sas.com/trust/subprocessors

  • SeekOut

    • Sub-processor list answered HTTP 429 · trust.seekout.com/subprocessors

  • UiPath

    • Sub-processor list answered HTTP 429 · uipath.com/subprocessors

  • Viz.ai

    • Sub-processor list shown only to visitors the vendor approves · viz.ai/sub-processors

  • Workday

    • Sub-processor list its robots.txt asks automated readers not to fetch it, so we do not read it · www.workday.com/content/dam/web/en-us/documents/legal/workday-subprocessors.pdf

No address found yet

18 vendors

We watch other pages for these vendors, but haven't found either address yet.

  • Aidoc

    • We have not found either document for Aidoc. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Appen

    • We have not found either document for Appen. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Arthur AI

    • We have not found either document for Arthur AI. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Cohere

    • We have not found either document for Cohere. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Helicone

    • We have not found either document for Helicone. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Iguazio

    • We have not found either document for Iguazio. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Labelbox

    • We have not found either document for Labelbox. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Palo Alto Networks

    • We have not found either document for Palo Alto Networks. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Paperspace

    • We have not found either document for Paperspace. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Prolific

    • We have not found either document for Prolific. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Qdrant

    • We have not found either document for Qdrant. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Roboflow

    • We have not found either document for Roboflow. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Sama

    • We have not found either document for Sama. That is what we looked for and didn’t find, not a statement that nothing is published.

  • SAP

    • We have not found either document for SAP. That is what we looked for and didn’t find, not a statement that nothing is published.

  • SoundHound

    • We have not found either document for SoundHound. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Speechmatics

    • We have not found either document for Speechmatics. That is what we looked for and didn’t find, not a statement that nothing is published.

  • TruEra

    • We have not found either document for TruEra. That is what we looked for and didn’t find, not a statement that nothing is published.

  • Vectra AI

    • We have not found either document for Vectra AI. That is what we looked for and didn’t find, not a statement that nothing is published.

Can’t find your vendor’s page here?

There are two reasons a row comes up empty, and you handle them differently.

A cartoon. A records clerk stands politely at a closed door with a sign reading “robots.txt”, writing on a clipboard whose tag reads “refused” and a time, not trying the handle.
If a site turns our reader away, the record says we couldn't read it.

No address at all

We haven’t found a page for that vendor. Ask them: “where do you publish your sub-processor list, and how will you tell me when it changes?” Whatever the answer, it belongs in your file.

Marked as refusing our reader

The page answered, and turned our reader away. Open it yourself in a browser.

Spotted an error? Corrections go to contact, and a vendor can claim its record at for vendors. Both are free.

Found your vendor’s pages? We’ll read them for you.

Name the AI vendors in your product. When one of these pages changes a fact, you get the lines that moved and the date any window runs out.

Try it free for 14 days

No card. Nothing to cancel.