# Aikido Security

Aikido Security declares [8 subprocessors](https://thirdpartyindex.com/vendors/aikido-security#subprocessors) in [its subprocessor list](https://trustcenter.aikido.dev/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/227147)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). The list last changed on 2026-11-04: 0 added, 0 removed, 8 changed. [3 tracked vendors](https://thirdpartyindex.com/vendors/aikido-security#used-by) name Aikido Security as a subprocessor, including [Lettermint](https://thirdpartyindex.com/vendors/lettermint), [Spekit](https://thirdpartyindex.com/vendors/spekit) and [Peaky](https://thirdpartyindex.com/vendors/peaky).

Aikido Security (aikido.dev): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/aikido-security
- Documents last verified: 2026-11-12
- Transparency rating: 92/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 4/7 (partial); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 8 tracked vendors directly, 68 within two hops, 288 within three; 3 tracked vendors rely on it directly, 5 within two hops, 38 within three
- Cite as: Aikido Security, Third Party Index, https://thirdpartyindex.com/vendors/aikido-security (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://trustcenter.aikido.dev/subprocessors | 2026-11-11 | 2026-11-06 |
| Data processing addendum | https://www.aikido.dev/legal/dpa | 2026-11-12 | 2026-11-12 |
| Privacy policy | https://www.aikido.dev/policies/privacy | 2026-11-11 | 2026-11-09 |
| Terms | https://www.aikido.dev/policies/terms | 2026-11-11 | 2026-11-09 |
| Security page | https://www.aikido.dev/trust-center | 2026-11-11 | 2026-11-02 |
| security.txt | https://www.aikido.dev/.well-known/security.txt | 2026-11-11 | 2026-09-23 |
| Status page | https://status.aikido.dev/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (8)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | - Aikido: Infrastructure hosting, AI inference | EU/US/ME/AP | 2026-11-06 |
| [Apideck](https://thirdpartyindex.com/vendors/apideck.md) | — | - Aikido: Task tracker integrations (optional) | 2026-11-04 |
| [Flare](https://thirdpartyindex.com/vendors/flare.md) | — | - Aikido: Dark web leaked data monitoring (optional) - Noon: Dark web leaked data monitoring | 2026-11-04 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | - Aikido: AI inference - Noon: Infrastructure hosting, mail integration | EU/US | 2026-11-06 |
| [Microsoft Azure Cloud](https://thirdpartyindex.com/vendors/microsoft.md) | - Aikido: AI inference - Noon: Mail integration, AI inference | EU/US | 2026-11-04 |
| [Monad](https://thirdpartyindex.com/vendors/monad.md) | — | - Aikido: SIEM integrations (optional) | 2026-11-04 |
| [OpenAI Developer API Access](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | - Aikido: AI inference | EU/US | 2026-11-06 |
| [Vonage](https://thirdpartyindex.com/vendors/vonage.md) | - Noon: Delivery of vishing | EU/US | 2026-11-04 |

Read from ([evidence](https://thirdpartyindex.com/evidence/227147)). CSV: https://thirdpartyindex.com/vendors/aikido-security/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Web Technologies

Aikido Security's homepage made 345 requests to 45 domains, 17 services controlled by another company, and 1 domain not identified. Loaded on 2026-11-09 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

17 third parties by category: Analytics 5 (Google Cloud, Snitcher, LinkedIn, Meta; usually detected as Analytics: posthog); Advertising 4 (Microsoft, OpenAI, Reddit, Inc.; usually detected as Advertising: Vibe Advertising Inc.); Marketing automation 2 (HubSpot, Dreamdata); A/B Testing 1 (Webflow); Cookie compliance 1 (CookieYes); CDN 1 (jsDelivr); Video players 1 (reviewed: Vimeo); Unclassified 2 (TrafficGuard Pty Ltd, TrafficGuard). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (17)

- Google Cloud: 115 requests to youtube.com, doubleclick.net, google.com, gstatic.com, jnn-pa.googleapis.com, ytimg.com, googleadservices.com, googlesyndication.com, ajax.googleapis.com, fonts.googleapis.com, ggpht.com, googletagmanager.com; Google Analytics, Google Font API, Google Hosted Libraries, Google Tag Manager, YouTube (its subprocessor list names it too)
- Webflow: 110 requests to website-files.com, intellimize.co, d3e54v103j8qbb.cloudfront.net; Intellimize, Webflow 1.6.0, jQuery 3.5.1
- jsDelivr: 28 requests to jsdelivr.net; jsDelivr
- Vimeo: 25 requests to vimeocdn.com, vimeo.com
- HubSpot: 16 requests to hs-scripts.com, hsforms.com, hubspot.com, hscollectedforms.net, hs-analytics.net, hs-banner.com, hsadspixel.net, hscta.net, hubapi.com; HubSpot
- CookieYes: 6 requests to cdn-cookieyes.com, cookieyes.com; CookieYes
- Snitcher: 5 requests to snitcher.com; Snitcher
- Microsoft: 4 requests to bing.com; Microsoft Advertising (its subprocessor list names it too)
- OpenAI: 4 requests to openai.com; ChatGPT Ads Measurement Pixel (its subprocessor list names it too)
- posthog: 4 requests to posthog.com
- LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.438
- Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads
- Dreamdata: 2 requests to dreamdata.cloud; Dreamdata
- TrafficGuard Pty Ltd: 2 requests to trafficguard.ai
- TrafficGuard: 1 request to tgtag.io
- Vibe Advertising Inc.: 1 request to vibe.co

### Unknown (1)

Domains not identified yet: webflow.services

### First party (1)

- Aikido Security: 9 requests to aikido.dev; Cloudflare, Finsweet, GSAP 3.15.1, HSTS, HTTP/3, Open Graph, PostHog, Priority Hints, RSS, Swiper, TrafficGuard, Vimeo, Webpack

10 tracked companies loaded by the homepage are not in Aikido Security's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (3)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Lettermint](https://thirdpartyindex.com/vendors/lettermint.md): Continuous security scanning of our infrastructure and source code.; Security
- [Peaky](https://thirdpartyindex.com/vendors/peaky.md): Security
- [Spekit](https://thirdpartyindex.com/vendors/spekit.md): Security vulnerability and scanning

## Service status

Incidents it reported on its own status page.

- Last 43 days: 1 reported incidents (0 major or critical, 1 minor, 0 with no impact stated)
- Typical time to resolve: 10 h 50 min
- Status page last read: 2026-11-11
- 2026-11-02: Persistent permission popups generated by Aikido Device Protection (minor)

## Incidents reported by Aikido Security's subprocessors

Incidents reported in the last 30 days on their own status pages by 1 vendor Aikido Security lists as a subprocessor. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Aikido Security lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor)

## Recent changes

Changes to its documents and subprocessor list since monitoring began.

- 2026-11-04: Changed subprocessor: Amazon Web Services (purpose: (Aikido), Aikido: Infrastructure Hosting → Aikido: Infrastructure Hosting) ([evidence](https://thirdpartyindex.com/evidence/211856))
- 2026-11-04: Changed subprocessor: Apideck (locations: (Aikido) → Aikido: Task tracker integrations (optional); purpose: Aikido: Task tracker integrations (optional) → none) ([evidence](https://thirdpartyindex.com/evidence/211856))
- 2026-11-04: Changed subprocessor: Flare (locations: Aikido: Dark web leaked data monitoring (optional) Noon: Dark web leaked data monitoring → Aikido: Dark web leaked data monitoring (optional) - Noon: Dark web leaked data monitoring) ([evidence](https://thirdpartyindex.com/evidence/211856))
- 2026-11-04: Changed subprocessor: Google Cloud (purpose: Aikido: AI inference Noon: Hosting provider, mail integration → Aikido: AI inference - Noon: Hosting provider, mail integration) ([evidence](https://thirdpartyindex.com/evidence/211856))
- 2026-11-04: Changed subprocessor: Microsoft Azure Cloud (purpose: Aikido: AI inference Noon: Mail integration, AI inference → Aikido: AI inference - Noon: Mail integration, AI inference) ([evidence](https://thirdpartyindex.com/evidence/211856))
- 2026-11-04: Changed subprocessor: Monad (locations: (Aikido) → Aikido: SIEM integrations (optional); purpose: Aikido: SIEM integrations (optional) → none) ([evidence](https://thirdpartyindex.com/evidence/211856))
- 2026-11-04: Changed subprocessor: OpenAI Developer API Access (purpose: (Aikido), Aikido: AI Inference → Aikido: AI Inference) ([evidence](https://thirdpartyindex.com/evidence/211856))
- 2026-11-04: Changed subprocessor: Vonage (locations: (Noon) → EU/US) ([evidence](https://thirdpartyindex.com/evidence/211856))

Feed: https://thirdpartyindex.com/vendors/aikido-security/changes.atom

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/aikido-security

## Security contact

From its security.txt (https://www.aikido.dev/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/5645)):

- Contact: https://app.intigriti.com/programs/aikido/aikido/detail
- Contact: mailto:security@aikido.dev
- Disclosure policy: https://app.intigriti.com/programs/aikido/aikido/detail
- Acknowledgments: https://app.intigriti.com/programs/aikido/aikido/detail
- Security jobs: https://www.aikido.dev/careers
- Languages: en
- Valid until 2027-02-01

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
