Snapshot 256833

Document
Subprocessor list
URL
https://socket.dev/subprocessors
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
306395 bytes
SHA-256 (raw)
b91cce1fc66d64273802e2a0bdd8d73651a86b3ca93c4b139bf0c20f3e46917b
SHA-256 (normalized text)
c0e1d815fb43225fabcfa0cd55203359b9774b5309077e7c9078c84fd26ef172

Parsed

What we read from this document, as JSON. Each entry names the snapshot it was read from.

{
  "entries": [
    {
      "kind": "subprocessor",
      "vendor": "activecampaign",
      "evidence_id": 218415,
      "data": {
        "name": "ActiveCampaign, LLC (Postmark)",
        "purposes": [
          "Sending emails like password reset or login links"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Emails, login magic links"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "amazon-web-services",
      "evidence_id": 218415,
      "data": {
        "name": "Amazon Bedrock",
        "purposes": [
          "AI inference with other commercial models"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "AI Vendor"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Open Source Package source code; data in maintenance and support issues and internal troubleshooting; customer dashboard; customer artifacts (with customer approval)"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "amazon-web-services",
      "evidence_id": 218415,
      "data": {
        "name": "Amazon S3",
        "purposes": [
          "storage of open source package data"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Open Source Package tarballs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "anthropic",
      "evidence_id": 218415,
      "data": {
        "name": "Anthropic",
        "purposes": [
          "AI models and inference"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "AI Vendor"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Open Source Package source code; data in maintenance and support issues and internal troubleshooting; customer dashboard; customer artifacts (with customer approval)"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "backblaze",
      "evidence_id": 218415,
      "data": {
        "name": "Backblaze",
        "purposes": [
          "storage of open source package data"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Open Source Package tarballs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "clickhouse",
      "evidence_id": 218415,
      "data": {
        "name": "ClickHouse, Inc",
        "purposes": [
          "organization alerts and analytics"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Customer alert metadata"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "datadog",
      "evidence_id": 218415,
      "data": {
        "name": "Datadog, Inc.",
        "purposes": [
          "used for system diagnostics"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "System Monitoring & Errors (Hosted application monitoring, product stack traces, customer entity Identifiers, application logs)"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "sentry",
      "evidence_id": 218415,
      "data": {
        "name": "Functional Software, Inc (dba Sentry)",
        "purposes": [
          "We use this for tracing and error logging"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Errors (Product stack traces, customer entity Identifiers)"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "google-cloud",
      "evidence_id": 218415,
      "data": {
        "name": "GCP",
        "purposes": [
          "service infrastructure"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Customer manifest files, SBOMs, generated alerts"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "hubspot",
      "evidence_id": 218415,
      "data": {
        "name": "HubSpot, Inc.",
        "purposes": [
          "organizing customer information and sales communications"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Sales"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Customer conversations, sales, contact info"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "linear",
      "evidence_id": 256833,
      "data": {
        "name": "Linear Orbit, Inc. (Linear)",
        "purposes": [
          "keeping track of customer issues and maintaining context while providing customer support"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Tarballs of manifests"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "mixpanel",
      "evidence_id": 218415,
      "data": {
        "name": "Mixpanel",
        "purposes": [
          "for measuring analytics on socket's public websites"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "EU",
          "USA",
          "based on Customer’s selection and configuration of the Application Services"
        ],
        "data_categories": [
          "Analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "n8n",
      "evidence_id": 218415,
      "data": {
        "name": "n8n GmbH (DBA n8n)",
        "purposes": [
          "Automation platform"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "EU",
          "USA"
        ],
        "data_categories": [
          "Analytics, Customer conversations, sales, contact info"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "openai",
      "evidence_id": 218415,
      "data": {
        "name": "OpenAI",
        "purposes": [
          "AI models and inference"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "AI Vendor"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Open Source Package source code; data in maintenance and support issues and internal troubleshooting; customer dashboard; customer artifacts (with customer approval)"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "plausible-analytics",
      "evidence_id": 218415,
      "data": {
        "name": "Plausible",
        "purposes": [
          "measuring traffic on Socket's public package pages"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "EU"
        ],
        "data_categories": [
          "Analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "readme",
      "evidence_id": 218415,
      "data": {
        "name": "README",
        "purposes": [
          "Documentation knowledge base"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "—"
        ],
        "data_categories": [
          "Documentation for socket"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "sanity",
      "evidence_id": 218415,
      "data": {
        "name": "Sanity",
        "purposes": [
          "Used as a CMS"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Blog posts, public content, announcements"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "slack",
      "evidence_id": 218415,
      "data": {
        "name": "Slack Technologies, LLC",
        "purposes": [
          "Communication around customer support issues; We have a feature to send notifications to users via slack as an opt-in method"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "Links to customer data, snippets, customer provided logs, zips, etc..; Scan alerts and notifications"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "stripe",
      "evidence_id": 218415,
      "data": {
        "name": "Stripe, LLC.",
        "purposes": [
          "payment processing"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "Customer-dependent",
          "Depends on user/customer location; see Stripe's terms and conditions"
        ],
        "data_categories": [
          "Payment methods, invoices, etc."
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 218415,
      "data": {
        "name": "Twitter",
        "purposes": [
          "posts social media messages about malware findings"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "—"
        ],
        "data_categories": [
          "Malware announcements and autogenerated news stories"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "vanta",
      "evidence_id": 218415,
      "data": {
        "name": "Vanta",
        "purposes": [
          "Enabling customers to save alerts"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "Customer-dependent",
          "Determined by Customer Vanta Account"
        ],
        "data_categories": [
          "Scan alerts and notifications"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "workos",
      "evidence_id": 218415,
      "data": {
        "name": "WorkOS",
        "purposes": [
          "to support SSO as a login method for socket.dev"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "USA"
        ],
        "data_categories": [
          "SSO settings, user ids, user emails, user names"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "zenduty",
      "evidence_id": 218415,
      "data": {
        "name": "Zenduty",
        "purposes": [
          "paging support for incident response"
        ],
        "sections": [
          "Subprocessors"
        ],
        "services": [
          "Product"
        ],
        "locations": [
          "—"
        ],
        "data_categories": [
          "Pages and support escalation"
        ]
      }
    }
  ]
}