Labs / Time machine / GitHub
GitHub
The subprocessor list as we last read it, on Nov 11, 2026.
Dates are when we read the list (UTC), not when GitHub changed it. Between two readings we don't know what it said.
tall: list changed · medium: document changed · short: read, no change · x: check failed · dotted: change dates only. Tap a tick or use the date box.
We record change dates, not every check, before Oct 11, 2026.
We have published no changes to this vendor's list; our first reading was Sep 21, 2026.
Read Nov 11, 2026 · 25 companies named as a subprocessor · stored document
| Name | Purpose | Location | First read |
|---|---|---|---|
| Amazon Web Services Inc (AWS) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Anthropic PBC AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Cerebras Systems Inc. AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Cloudflare | Content delivery service | Corporate: United States; Location of Processing: United States | |
| DataDome Solutions, Inc. | Security management | Corporate: United States; Location of Processing: United States, France | |
| Elasticsearch, Inc. | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| Fastly | Content delivery service | Corporate: United States; Location of Processing: United States | |
| Fireworks AI AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States, Germany, Iceland | |
| FullStory, Inc. | Customer support ticketing analysis | Corporate: United States; Location of Processing: United States | |
| Google Cloud Platform (GCP) | Cloud Hosted Infrastructure, AI Inference and AI Services | Corporate: United States; Location of Processing: United States, Belgium, Singapore | |
| Hewlett-Packard Limited | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| LambdaTest | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| Microsoft (Azure) | Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services; Cognitive Services and customer support ticketing analysis; Technical Services | Corporate: United States; Location of Processing: United States; Location of Processing: United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom; Location of Processing: United States, Canada, Chile, Mexico | |
| Moveworks | Customer support ticketing analysis | Corporate: United States; Location of Processing: United States | |
| NexMo Inc (aka Vonage) | SMS notification provider for 2 Factor Authentication | Corporate: United States; Location of Processing: United States | |
| npm Inc | GitHub Subsidiary | Corporate: United States; Location of Processing: United States | |
| Obsidian Security | Security management | Corporate: United States; Location of Processing: United States | |
| OpenAI AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Oracle America, Inc. | Cloud Hosted Infrastructure | Corporate: United States; Location of Processing: United States | |
| Pusher | Building and managing real-time infrastructure for web and mobile applications | Corporate: United States; Location of Processing: United States | |
| Semmle Inc | GitHub Subsidiary | Corporate: United States; Location of Processing: United States | |
| Tines Automation Inc. | Security management | Corporate: United States; Location of Processing: United States | |
| Twilio (SendGrid) | SMS notification provider for 2 Factor Authentication | Corporate: United States; Location of Processing: United States | |
| xAI AI | AI Inference and AI Services | Corporate: United States; Location of Processing: United States | |
| Zendesk | Customer support ticketing system | Corporate: United States; Location of Processing: United States |
Affiliates it names
Built from the changes we published; changes we recorded without an alert (parser fixes, entries approved after review) don't appear. Where we later improved how we read a list, an earlier list may look different from the vendor's page at the time.
Gaps in our readings
No gaps since Oct 11, 2026.
All readings (33)
History starts Sep 21, 2026. Dates are UTC. Data CC BY 4.0. Shown as stored when this page was built.