Snapshot 6489

Document
Subprocessor list
URL
https://trust.ngrok.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
382986 bytes
SHA-256 (raw)
53839f58cd234d6150a15318f0bf2499e1194e0a38c2b4d21b10644beb90778f
SHA-256 (normalized text)
d6bc301d5b21e0828f3502a47cf34018521fe845036bc2a5f1fed9a6138e38f3

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Trust Center
Start your security review
View & download sensitive information
Ask for information
Overview
ngrok makes it easy to secure your tunnel traffic by providing configurable modules for authentication, encryption, and network policies. By combining components, you can meet your security requirements in a matter of minutes without rearchitecting your application. From concept to connection, ngrok provides a secure, scalable tunnel to share your system with the world or just the single person you need. ngrok has implemented best-in-class security practices to keep customer data safe.
Compliance
CCPA
EU-US DPF
GDPR
HIPAA
SOC 2
Documents
REPORTSHIPAA
REPORTSOther Reports
REPORTSPentest Report
REPORTSPrivacy Whitepaper
REPORTSSecurity Whitepaper
REPORTSSOC 2 Report
SELF-ASSESSMENTSCAIQ Lite
POLICIESAcceptable Use Policy
POLICIESAccess Control Policy
POLICIESAsset Management Policy
POLICIESBusiness Continuity/Disaster Recovery (BC/DR) Policy
POLICIESData Security Policy
Risk Profile
Third Party DependenceYes
HostingMajor Cloud Provider
Product Security
Audit Logging
Data Security
Integrations
View more
Reports
HIPAA
Other Reports
Pentest Report
View more
Self-Assessments
CAIQ Lite
Data Security
Access Monitoring
Data Backups
Data Erasure
View more
App Security
Code Analysis
Credential Management
Software Development Lifecycle
View more
Legal
Subprocessors
Customer Audit Rights
Cyber Insurance
View more
Access Control
Bring Your Own Device (BYOD)
Data Access
Device Lock
View more
Infrastructure
Status Monitoring
Amazon Web Services
Anti-DDoS
View more
Endpoint Security
Anti-Malware
Disk Encryption
Endpoint Detection & Response
View more
Network Security
Distributed Denial of Service Protection (Anti-DDoS)
DNSSEC
Firewall
View more
Corporate Security
Employee Training
HR Security
Incident Response
View more
Policies
Acceptable Use Policy
Access Control Policy
Asset Management Policy
View more
Security Grades
CryptCheck
ngrok.com
A+
api.ngrok.com
A+
Qualys SSL Labs
Ngrok Website
A
Ngrok API
A+
Trust Center Updates
Subprocessor Update for ngrok's AI Gateway
Subprocessors
As ngrok continues to evolve and improve our platform, we have decided to engage with OpenAI and Anthropic as sub-processors in connection with ngrok AI Gateway.
ngrok sends requests to OpenAI and/or Anthropic only at the customer's direction, when the customer (1) configures AI Gateway for OpenAI and/or Anthropic and (2) uses ngrok-managed AI API keys. AI Gateway is currently in Early Access, and the ngrok-managed key feature has not yet been released. We are providing this notice early in the interest of transparency.
Because these vendors may process your organization's data (as defined under the General Data Protection Regulation) in connection with the services & products that ngrok provides, this communication is a notification that OpenAI and Anthropic are going to be added as a new sub-processors. Data will be stored in the United States by both OpenAI and Anthropic. Please let us know if you have any questions.
Website: https://ngrok.ai/
Docs: https://ngrok.com/docs/ai-gateway/overview
If you think you may have discovered a vulnerability, please send us a note.
Report issue