# 1Password

1Password declares [28 subprocessors](https://thirdpartyindex.com/vendors/1password#subprocessors) in [its subprocessor list](https://1password.com/files/legal/1password-subprocessor-list.pdf), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/165072)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-09-21. [22 tracked vendors](https://thirdpartyindex.com/vendors/1password#used-by) name 1Password as a subprocessor, including [EasyPost](https://thirdpartyindex.com/vendors/easypost), [LambdaTest](https://thirdpartyindex.com/vendors/lambdatest) and [Digistorm AU](https://thirdpartyindex.com/vendors/digistorm-au).

1Password (1password.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/1password
- Documents last verified: 2026-11-11
- Transparency rating: 93/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 5/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 20 tracked vendors directly, 179 within two hops, 499 within three; 22 tracked vendors rely on it directly, 35 within two hops, 333 within three
- Cite as: 1Password, Third Party Index, https://thirdpartyindex.com/vendors/1password (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.1password.io/ | 2026-11-11 | 2026-11-02 |
| Subprocessor list | https://1password.com/files/legal/1password-subprocessor-list.pdf | 2026-11-11 | 2026-10-27 |
| Data processing addendum | https://1password.com/legal/saas-manager/data-processing-agreement | 2026-11-11 | 2026-11-04 |
| Privacy policy | https://support.1password.com/1password-privacy/ | 2026-11-11 | 2026-09-21 |
| Terms | https://1password.com/legal/terms-of-service | 2026-11-11 | 2026-11-03 |
| Security page | https://1password.com/security | 2026-11-11 | 2026-09-21 |
| security.txt | https://1password.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://status.1password.com/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (28)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Ada Support Inc.](https://thirdpartyindex.com/vendors/ada-support.md) | Customer support | Canada, US | 2026-09-21 |
| [Adobe, Inc. (Marketo)](https://thirdpartyindex.com/vendors/adobe.md) | Communications | US | 2026-09-21 |
| AgileBits UK Limited | — | United Kingdom | 2026-10-02 |
| AgileBits USA, Inc. | — | US | 2026-10-02 |
| [Aha Labs, Inc.](https://thirdpartyindex.com/vendors/aha-labs.md) | Customer feedback | US | 2026-09-21 |
| [Amazon Web Services, Inc.](https://thirdpartyindex.com/vendors/amazon-web-services.md) | — | Canada, EU, US | 2026-09-21 |
| Apono, Inc. | — | US | 2026-09-21 |
| Apono Tech Ltd. | — | Israel | 2026-10-02 |
| [Datadog, Inc.](https://thirdpartyindex.com/vendors/datadog.md) | Cloud monitoring | US | 2026-09-21 |
| [Functional Software, Inc. (Sentry)](https://thirdpartyindex.com/vendors/sentry.md) | Bug/error reporting | US | 2026-09-21 |
| [Google LLC (GA)](https://thirdpartyindex.com/vendors/google-cloud.md) | Product analytics | US | 2026-09-21 |
| [Intercom R&D Unlimited Company](https://thirdpartyindex.com/vendors/intercom.md) | Customer Support | EU | 2026-09-21 |
| [Iterable, Inc.](https://thirdpartyindex.com/vendors/iterable.md) | Product emails | US | 2026-09-21 |
| Keylocker B.V. | — | Netherlands | 2026-10-02 |
| [Kolide, Inc.](https://thirdpartyindex.com/vendors/kolide.md) | — | US | 2026-09-21 |
| [MailGun Technologies, LLC](https://thirdpartyindex.com/vendors/mailgun.md) | Email delivery | US | 2026-09-21 |
| [Microsoft, Inc.](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud storage | US | 2026-09-21 |
| [Microsoft Ireland Operations Ltd.](https://thirdpartyindex.com/vendors/microsoft.md) | Cloud storage | EU, UK, US | 2026-09-21 |
| [Mixpanel, Inc.](https://thirdpartyindex.com/vendors/mixpanel.md) | Product analytics | US | 2026-09-21 |
| [MongoDB, Inc.](https://thirdpartyindex.com/vendors/mongodb.md) | DB provider | US | 2026-09-21 |
| [Postmark, Inc.](https://thirdpartyindex.com/vendors/postmark.md) | Customer support | US | 2026-09-21 |
| [Rocketlane Corp.](https://thirdpartyindex.com/vendors/rocketlane.md) | Professional Services Platform | US | 2026-10-02 |
| [Salesforce Canada Corporation](https://thirdpartyindex.com/vendors/salesforce.md) | CRM | Canada | 2026-09-21 |
| [Snowflake, Inc](https://thirdpartyindex.com/vendors/snowflake.md) | Data warehousing | US | 2026-09-21 |
| [Stripe, Inc.](https://thirdpartyindex.com/vendors/stripe.md) | Payment processing | US | 2026-09-21 |
| Trelica, Ltd. | — | United Kingdom | 2026-09-21 |
| Twillo, Inc (SendGrid) | Product emails | US | 2026-09-21 |
| [ZenDesk, Inc.](https://thirdpartyindex.com/vendors/zendesk.md) | Customer Support | EU, US | 2026-09-21 |

Read from ([evidence](https://thirdpartyindex.com/evidence/478)). CSV: https://thirdpartyindex.com/vendors/1password/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, PCI DSS, TX-RAMP, CSA STAR, TISAX ([evidence](https://thirdpartyindex.com/evidence/4971))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/4971))

## Web Technologies

1Password's homepage made 79 requests to 6 domains, and 4 services controlled by another company. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

4 third parties by category: Advertising 1 (usually detected as Advertising: Google Cloud); Cookie compliance 1 (Transcend); Personalisation 1 (usually detected as Personalisation: Contentful); RUM 1 (Datadog). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (4)

- Contentful: 9 requests to ctfassets.net
- Datadog: 6 requests to browser-intake-datadoghq.com; Datadog (its subprocessor list names it too)
- Transcend: 4 requests to transcend-cdn.com; Transcend
- Google Cloud: 1 request to google-analytics.com (its subprocessor list names it too)

### First party (1)

- 1Password: 59 requests to 1password.com, 1passwordservices.com; Cloudflare, Contentful, Google Analytics UA, Google Tag Manager, HSTS, Next.js 16.4.1, Open Graph, PWA, React, Vercel, Vimeo, Webpack, theTradeDesk

1 tracked company loaded by the homepage is not in 1Password's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (22)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Anaconda](https://thirdpartyindex.com/vendors/anaconda.md): Password and secrets management
- [Appamondo](https://thirdpartyindex.com/vendors/appamondo.md): Authentication & Identity management
- [Cloudshelf](https://thirdpartyindex.com/vendors/cloudshelf.md): Security Software
- [Cortex Genie Humain](https://thirdpartyindex.com/vendors/cortex-genie-humain.md): Password and Secure Key management; Password management
- [Decimal AI](https://thirdpartyindex.com/vendors/decimal-ai.md): 1Password is used by Decimal to manage and securely store company-owned secrets and credentials. This includes API keys, infrastructure access tokens, internal …
- [Digistorm AU](https://thirdpartyindex.com/vendors/digistorm-au.md): Internal Business Operations; Password management
- [Docmosis](https://thirdpartyindex.com/vendors/docmosis.md): Password Management Software; Password management
- [Drivetrain](https://thirdpartyindex.com/vendors/drivetrain.md)
- [EasyPost](https://thirdpartyindex.com/vendors/easypost.md): Identity Providers
- [EventUp Planner](https://thirdpartyindex.com/vendors/eventup-planner.md)
- [FrankieOne](https://thirdpartyindex.com/vendors/frankieone.md): Internal User Management
- [FundApps](https://thirdpartyindex.com/vendors/fundapps.md)
- [Healthy Together](https://thirdpartyindex.com/vendors/healthy-together.md)
- [LambdaTest](https://thirdpartyindex.com/vendors/lambdatest.md): Provides secure credential storage application internally.
- [Medallion](https://thirdpartyindex.com/vendors/medallion.md)
- [Mediafly](https://thirdpartyindex.com/vendors/mediafly.md): Password management
- [Mem0](https://thirdpartyindex.com/vendors/mem0.md)
- [Pharos](https://thirdpartyindex.com/vendors/pharos.md)
- [Salad](https://thirdpartyindex.com/vendors/salad.md)
- [Simple Analytics](https://thirdpartyindex.com/vendors/simple-analytics.md): Password manager
- [Squirro](https://thirdpartyindex.com/vendors/squirro.md): Password database; Provider; SaaS for Operations
- [SuiteOp](https://thirdpartyindex.com/vendors/suiteop.md): Password Management

## Service status

Incidents it reported on its own status page.

- Last 90 days: 3 reported incidents (2 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 27 min
- Status page last read: 2026-11-12
- 2026-10-16: High error rate on 1Password.com (major)
- 2026-10-16: Some users are unable to view vault profiles using the web interface (minor)
- 2026-09-09: Device Trust Service Disruption (major)
- 2026-07-22: Account governance functions are unavailable in SaaS Manager (major)
- 2026-07-17: SaaS Manager Workflows are not running as expected (minor)
- 2026-07-13: Degraded user-related operations for individual and family accounts (minor)
- 2026-07-13: Password Manager Update Server Outage (no impact stated)
- 2026-07-02: Device Trust Outage (critical)

## Incidents reported by 1Password's subprocessors

Incidents reported in the last 30 days on their own status pages by 12 vendors 1Password lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000347 (minor)
- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported US issues feed throwing intermittent errors (minor)
- 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Account emails not being delivered (major)
- 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported EU region replay ingestion latency (minor)
- 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000337 (minor)
- 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000336 (minor)
- 2026-11-06: [Aha Labs](https://thirdpartyindex.com/vendors/aha-labs#status), which 1Password lists as a subprocessor, reported Elevated error rates for some customers (no impact stated)
- 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which 1Password lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major)
- 2026-11-05: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which 1Password lists as a subprocessor, reported Delays in activity data (no impact stated)
- 2026-11-05: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which 1Password lists as a subprocessor, reported Duplicate charges on a subset of customer accounts (no impact stated)
- 2026-11-04: [Ada Support](https://thirdpartyindex.com/vendors/ada-support#status), which 1Password lists as a subprocessor, reported Complete ada outage (critical)
- 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Ingestion delays across all data (minor)
- 2026-11-04: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which 1Password lists as a subprocessor, reported Delays processing Inbound messages (no impact stated)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Delays in spans and transactions processing (major)
- 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Sentry.io dashboard and API is down (critical)
- 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Sentry dashboard is down (critical)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000321 (minor)
- 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which 1Password lists as a subprocessor, reported Slow Fin Procedures (minor)
- 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000319 (minor)
- 2026-10-28: [Iterable](https://thirdpartyindex.com/vendors/iterable#status), which 1Password lists as a subprocessor, reported Some customers using Sparkpost (US hosted) for email may be seeing delayed or slow sends (minor)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which 1Password lists as a subprocessor, reported Metrics query are disrupted (major)
- 2026-10-28: [Mailgun](https://thirdpartyindex.com/vendors/mailgun#status), which 1Password lists as a subprocessor, reported Route delays in EU Region (minor)
- 2026-10-27: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which 1Password lists as a subprocessor, reported SMS codes for two-factor authentication may not arrive (no impact stated)
- 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which 1Password lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-21: [Ada Support](https://thirdpartyindex.com/vendors/ada-support#status), which 1Password lists as a subprocessor, reported Messages not being delivered (US region) (major)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000301 (critical)
- 2026-10-21: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which 1Password lists as a subprocessor, reported Degraded Service for Requests to decide.mixpanel.com (no impact stated)
- 2026-10-21: [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel#status), which 1Password lists as a subprocessor, reported Degraded Service for Requests to decide.mixpanel.com (no impact stated)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Increased latency processing integration webhooks (minor)
- 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Sentry.io not loading in US region (critical)
- 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000299 (minor)
- 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Sentry.io not loading (major)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which 1Password lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000294 (critical)
- 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Sentry is down (critical)
- 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000290 (minor)
- 2026-10-16: [Ada Support](https://thirdpartyindex.com/vendors/ada-support#status), which 1Password lists as a subprocessor, reported Issues with a ticketing integration (minor)
- 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000287 (critical)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which 1Password lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which 1Password lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor)
- 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which 1Password lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major)
- 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which 1Password lists as a subprocessor, reported INC20000277 (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/1password

## Security contact

From its security.txt (https://1password.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/481)):

- Contact: mailto:security@agilebits.com
- Contact: mailto:bugbounty@agilebits.com
- Encryption key: https://1password.com/support-at-agilebits-pubkey-42F3D4D4.asc
- No expiry date

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
